create-pr

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). Step 6 “Gather commit context” runs git log <BASE_BRANCH>..HEAD --format="%s%n%b" and --oneline, which ingests commit subject/body text authored by other contributors (outsider-authored free text) into the agent’s LLM context when composing the PR title/description.

MEDIUM W021: Hidden or invisible Unicode characters detected (potential obfuscation or prompt injection).

• Hidden Unicode characters detected (1 type(s) found)