gen-release-notes

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's Step 1 explicitly runs git remote get-url origin and gh pr list to fetch PRs and repo data from GitHub, meaning it ingests user-generated/untrusted third-party content (PR titles, descriptions, authors) which the agent must read and uses to decide categorization, versioning, and release-note content.