aicr-release-notes

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). High likelihood because the required workflow ingests outsider-authored content from tools/changelog output at runtime (commit messages / PR descriptions by other users), and then uses that free text as input to the LLM for “Classify commits into themes” and “Draft the Markdown”.