release-it

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). release-it’s runtime ingests free-text from the user-controlled project changelog source (e.g., it runs git log as git.changelog by default and uses that stdout as ${changelog} for GitHub/GitLab release notes).

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The docs include an "extends" example that uses a git-style remote config reference ("github:release-it/release-it-configuration"), which release-it can fetch at runtime to inherit configuration that may contain hooks/prompts or commands—i.e., remote content that can control prompts or execute code.