track-framework-updates

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). Outsider-authored free text from public upstream release bodies is fetched at runtime via gh api repos/{repo}/releases in scripts/fetch_releases.py, then included in framework-updates-raw.json as the body field (only line-pattern redacted, not removed), which is later read by the agent for digest generation.