release

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). The URL points to an untrusted/unknown GitHub user account (shipshitdev) referenced as the plugin author — GitHub releases from obscure personal accounts are a common vector for distributing executables and thus should be treated as suspicious until verified.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). The required runtime workflow reads PR data/commit metadata from GitHub (Phase 1/3 via gh pr list and related API calls), so outsider-authored PR/commit titles/messages can be incorporated into generated patch-note free text that is then sent into the agent’s LLM context for release planning/publishing.