ln-64-community-announcer

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). SKILL.md’s required runtime workflow explicitly reads “current authoritative documentation, installation instructions… relevant source diffs” and “inspect recent commits and up to three comparable announcements” from the target repository via the hosting API (lines 30-32 and 31-33), which can include outsider-authored free text such as commits/discussion/PR-authored content not chosen by the operating user.