pr-review

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In Step 1a/Step 1b the workflow reads first-party GitHub PR free text (PR title/body and diff) via gh pr view ... --json title,body,headRefName and gh pr diff {PR}, and Step 1b can also read project requirement/spec text from in-repo files and determine test/requirement references from that PR-authored content.