ios-release-notes

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). The skill’s runtime context is built from git commit subjects/dates via git log {PREV}..{CUR} --pretty=format:"%H...%s...%ad" (Step 4/6), and those commit messages are outsider-authored free text from other contributors in the repo (e.g., PR authors), which the agent then rewrites and prints into the LLM output.