qe-github-release-management

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's SKILL.md shows multiple required workflows that fetch and ingest user-generated GitHub content (e.g., "gh pr list" and "gh api repos/:owner/:repo/compare..." in the GitHub Actions and CLI examples) and then use those PRs/commit messages to generate changelogs, suggest version bumps, and drive release orchestration, so untrusted third-party content can materially influence agent actions.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill repeatedly runs npx claude-flow@alpha during runtime (e.g., in CI steps and many commands), which fetches and executes remote package code from the npm registry (https://registry.npmjs.org) and is relied on to control the swarm/agent orchestration, so this is a runtime external dependency that executes remote code.