create-release

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The runtime path is a tag-triggered GitHub release workflow that reads CHANGELOG.md content from the tagged commit to generate release notes, where the attacker can author that CHANGELOG via an injected tag/commit before the workflow runs.