release-openclaw-announcement

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). SKILL.md’s REQUIRED workflow instructs the agent to read “Current GitHub release body”, “CHANGELOG.md section”, and “Registry/package metadata” (outsider-authored public repo/release/registry text) and then draft content from it, which would be ingested into the LLM context at runtime.