pooled-release

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required workflow runs semantic-release, which consumes commit messages since the last tag (surfaced as release notes in the Verify step at SKILL.md:133-134). Outsider-authored commits can reach main only through merged PRs, which maintainers gate, so an attacker can plant text but cannot force it into the batch.