write

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). FLAG: SKILL.md's Release Notes Pre-flight explicitly instructs the agent to run "gh release view --json body -R /" and read public GitHub release bodies as style references—these are open, user-generated, untrusted third‑party pages that the agent must read and use to shape its output, so they could carry indirect prompt-injection instructions.