write-my-release-notes

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required workflow reads outsider-authored free text from GitHub issue bodies and comments (e.g., body, comments fields returned by gh search issues --json ... and gh issue view ... --json ... comments) and then uses that text to generate release-note prose in the agent’s LLM context.