release-manager

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). This skill’s required workflow uses GitHub REST API/CLI to “List/Release Details” and “Auto-Generate Notes/Changelog Generation” (i.e., it ingests release body text and PR-derived text authored by others from GitHub at runtime), which can include outsider-authored free text into the agent’s LLM context.