grouping-releases

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). This skill’s required workflow is an operator “batch reconciliation” over an org’s recent releases, which implies the agent will read outsider-authored release content (e.g., changelog/news/blog text from tracked URLs) to decide canonical vs coverage, creating an indirect prompt-injection path via fetched public web content.