make-pr-easy-to-review

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The runtime workflow reads a target PR by resolving it from a user-provided URL and then inspecting its commits, diff/changed paths, and PR description, which are outsider-authored free text (e.g., PR description/comments and commit messages) supplied via the PR.