changelog-generator

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The skill's scripts (scripts/generate_changelog.py and scripts/commit_linter.py) explicitly read commit messages from git ranges, stdin, or user-supplied input files and parse them to determine changelog contents and the recommended semver bump, so arbitrary user-generated commit text (an untrusted third-party source) can materially influence decisions and outputs.