flux-controller-patch-releases

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). SKILL.md instructs reading and extracting PR/issue text for changelog generation (“inspect the PR body… follow any referenced upstream PRs…”), which at runtime would require fetching outsider-authored PR descriptions/contents from GitHub APIs and injecting them as free text into the agent/LLM context.