semantic-release-automation

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In the required runtime workflow, templates/release.yml runs npx semantic-release, whose @semantic-release/commit-analyzer and @semantic-release/release-notes-generator read Conventional Commits from repository history (the PR title/commit messages authored by outsiders) without selecting a specific item beyond the repo’s commit range.