when-releasing-software-use-github-release-management

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.78). The workflow ingests outsider-authored free text via GitHub release notes/changelog generation: it fetches “commits since last release” and “issue references and PR numbers” (and likely their titles/bodies) from GitHub, which can include arbitrary text authored by other users, and then formats that text into the LLM context for changelog/release notes tasks (docs-writer steps 3.1–3.2, and draft release body-file).

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill invokes an external npm package at runtime via "npx claude-flow@alpha" (and related claude-flow hooks), which fetches and executes remote code that can control agent orchestration/prompt behavior, so this is a runtime external dependency that executes remote code.