infrastructure

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required workflow for release-changelog ingests outsider-authored free text from public/remote sources at runtime—specifically merged PR bodies via gh pr list ... --json number,title,body,labels (PR body text is authored by non-operating-user contributors), which the agent then uses to generate the changelog and thus feeds into the LLM context.