work-review-queue

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In work-review-queue, at runtime it builds and drains the repo’s reviewRequested issue queue from GitHub/GitLab/Linear (via the required work-review delegation), which entails reading outsider-authored issue/PR text (titles/bodies/comments and related PR state) from those services.