pr-grill-me

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow fetches and reads pull request diffs and commit messages from a git remote (GitHub), which can contain outsider-authored free text (e.g., in commit messages or code changes within a PR), introducing an indirect prompt injection risk via PR ingestion.