releasing

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In the required workflow’s “Craft Release Notes” step, the agent reads the FULL diff and git log from the repo plus PR descriptions obtained via gh pr list ... --json number,title,body, meaning outsider-authored PR bodies can be ingested as free text without selecting a specific trusted item.