changelog-generator

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The skill reads git commit history via git log at runtime; those commit messages are authored by repository contributors (outsiders relative to the operating user), and the LLM ingests the commit text to generate user-facing changelog bullets.