gh-oss-release

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). This skill explicitly fetches commit messages from public GitHub repositories using the gh api compare command in "Step 2" (gh api repos///compare/...HEAD) and then interprets those user-generated commit messages to decide semver bumps and whether to create releases, so untrusted third-party content can directly influence actions.