changeset-validation

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In scripts/changeset-prompt.mjs, the runtime prompt given to the LLM includes outsider-authored free text from the PR body ({{PR_BODY}}) when --ci is used, and from changeset markdown files/diffs that a PR author can submit, which are read from the repo working tree/git at runtime and injected into the prompt.