write-release-changelog

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 1.00). Contains a typosquat/lookalike host (evilfeaturebase.app) and ambiguous short hosts (https://fb/...) that resemble URL shorteners/obscured destinations — both are high-risk indicators for malicious or phishing distribution.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required workflow reads outsider-authored free text from GitHub release notes and issue bodies at runtime (via gh release view / gh issue view in the trace step), then passes that prose into the LLM context for parsing/drafting.