SeismicSystems
diff --git a/‎.github/workflows/claude-review.yml‎
Lines changed: 2 additions & 2 deletions b/‎.github/workflows/claude-review.yml‎
Lines changed: 2 additions & 2 deletions
@@ -1,7 +1,7 @@
 # Requires ANTHROPIC_API_KEY secret in repo Settings > Secrets and variables > Actions.
 #
-# Note: PR diffs are attacker-controlled content. The allowedTools scope is
-# restricted to read-only operations to limit impact of prompt injection.
+# Prompt injection: the action sanitizes untrusted PR content (strips HTML comments,
+# invisible chars, hidden attributes). Tools are restricted to read-only as a second layer.
 
 name: Claude Code
Original file line number	Diff line number	Diff line change
`@@ -1,7 +1,7 @@`
`1`	`1`	`# Requires ANTHROPIC_API_KEY secret in repo Settings > Secrets and variables > Actions.`
`2`	`2`	`#`
`3`		`-# Note: PR diffs are attacker-controlled content. The allowedTools scope is`
`4`		`-# restricted to read-only operations to limit impact of prompt injection.`
	`3`	`+# Prompt injection: the action sanitizes untrusted PR content (strips HTML comments,`
	`4`	`+# invisible chars, hidden attributes). Tools are restricted to read-only as a second layer.`
`5`	`5`
`6`	`6`	`name: Claude Code`
`7`	`7`