pilot-release-management-setup

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required runtime workflow for changelog-bot uses pilot-github-bridge to “scan merged PRs and commits” (i.e., fetches outsider-authored PR/commit text from GitHub at runtime) and then feeds that generated release-note prose into the agent’s LLM context for changelog generation.