create-release

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill explicitly fetches merged PRs from Gitee via the list_repo_pulls tool and reads PR titles/authors/descriptions (user-generated content) to classify changes and generate the release changelog that is then used to create a release, so untrusted third-party content can directly influence actions like tagging and release creation.