write-release-notes

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In SKILL.md step 1, the workflow runs fetch-release-data.sh which uses the GitHub CLI to read a release’s body and then fetches each linked PR’s title/body/labels/author/mergedAt via gh pr view, so outsider-authored GitHub PR text can be ingested at runtime.