comprehensive-review-pr-enhance

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required workflow is PR enhancement that analyzes the PR diff (e.g., via git diff/PR content) and then uses that diff-derived text to generate the LLM prompt/output; since PR diffs are authored by non-operating users, this is outsider-authored free text entering the LLM context indirectly through the PR diff content.