When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

• Where: .github/scripts/detect-model-changes.ts prompt construction for the model-sync automation handoff.

• Steps to reproduce: Return a model ID from the gateway containing newline/backtick markdown payload; run detection; inspect the generated prompt output.

• What failed: Untrusted model ID text is inserted into the prompt body verbatim, so injected markdown fences/instructions alter prompt structure instead of being treated as inert data.

• Code analysis: Reviewed filtering, model mapping, and prompt assembly in the production detection script. The code enforces provider/type/exclusion constraints but does not sanitize control characters in model IDs before joining into markdown bullet lines and embedding into the final prompt template.

• Relevant code:

  .github/scripts/detect-model-changes.ts (lines 64-72)

  .filter((m) => {
    const slashIndex = m.id.indexOf('/');
    if (slashIndex === -1) return false;
    if (!TRACKED_PROVIDERS.has(m.id.slice(0, slashIndex))) return false;
    if (m.type !== 'language') return false;
    const rawId = m.id.slice(slashIndex + 1);
    if (rawId.endsWith('-chat')) return false;
    if (rawId.includes('-oss-') || rawId.startsWith('oss-')) return false;
    return true;
  })

  .github/scripts/detect-model-changes.ts (lines 166-174)

  const modelList = newModels.map((m) => `- ${m.provider}/${m.id}`).join('\n');
  const today = new Date().toISOString().split('T')[0];
  const slug = Math.random().toString(36).slice(2, 8);
  
  const prompt = `New AI models have been detected from Vercel AI Gateway that are not yet in our static model list.

New models to add:
${modelList}

- **Why this is likely a bug:** Production code directly interpolates externally sourced model IDs into an instruction prompt without escaping, enabling prompt-structure injection by crafted IDs.
- **Introduced by this PR:** No – pre-existing bug (code not changed in this PR).
- **Timestamp:** 20:25

</details>

<details>
<summary>📋 View Recording</summary>

[Screen Recording](https://api.ito.ai/media/112bea0b-ab66-4b63-8daf-e4e6faa20b83.mp4?sig=3cd95b94629d67d5415b5a0d5a18561cf0a4d8552220fb30c74a0c0555292a26)

</details>