release-create-tracker-issue

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The skill’s Step 2 explicitly performs WebFetch(url=<announcement_url>...) on a user-supplied release-announcement URL and then parses/extracts milestone dates from the fetched page text, which is outsider-authored free text that becomes LLM context for Step 3.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). This skill issues a runtime WebFetch of the user-supplied announcement URL (e.g. https://dev-discuss.pytorch.org/t/pytorch-release-2-13-key-dates/3390) and uses the fetched page content to extract milestone dates that are then inserted verbatim into the generated issue body, so external content directly controls the agent's output.