cut-release

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The required workflow runs git fetch, git ls-remote, and git log/show against the remote origin (public/outsider-authored repository content), and then uses that fetched text (e.g., git show ...:package.json and commit/changelog-derived summaries) to populate the agent’s LLM context.