changelog

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required workflow runs gh pr list ... --json number,title,author and git log ... --format='%s' to collect PR titles/commit subjects from merged PRs/issues authored by other people, which are then used to generate the changelog text in the agent’s LLM context (indirect prompt-injection risk from outsider-authored free text).