cli-release

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The runtime workflow reads live GitHub Release/asset metadata and workflow run details (e.g., via gh release list/view and gh run list/watch against the repo) where the candidate beta tags/commitish and asset states ultimately originate from GitHub user-authored content and PR/commit activity.