github-release-pr-writer

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). Although the skill reads PR metadata and the full base-to-head diff from GitHub (and also reads repository instructions/templates/releases), it does not describe ingesting arbitrary outsider-authored free text as an unscoped feed; outsider content is only consumed when explicitly tied to the PR or repository content the user requests to inspect/review.