github-release-management

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The skill’s required runtime workflow uses GitHub CLI to fetch PRs/commits and issue/discussion bodies (e.g., gh pr list ... --json ... --jq ... and gh api repos/.../discussions ... -f body="$(cat RELEASE_CHANGELOG.md)"), where PR/issue/discussion text is authored by outsiders and is ingested into the LLM context for changelog/release-note generation.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill repeatedly invokes npx claude-flow@alpha at runtime (which fetches and executes code from the npm registry, e.g. https://registry.npmjs.org), so it relies on fetching and running remote code as a required runtime dependency.