diff --git a/python/ql/lib/change-notes/2026-06-18-prompt-injection-models.md b/python/ql/lib/change-notes/2026-06-18-prompt-injection-models.md
index 2390cd721f9..60f066e90e2 100644
--- a/python/ql/lib/change-notes/2026-06-18-prompt-injection-models.md
+++ b/python/ql/lib/change-notes/2026-06-18-prompt-injection-models.md
@@ -1,4 +1,4 @@
 ---
 category: minorAnalysis
 ---
-* Added prompt-injection sink models (`system-prompt-injection` and `user-prompt-injection` kinds) for the `openai`, `agents`, `anthropic`, `google-genai`, `openrouter` and `langchain` frameworks.
+* Added prompt-injection sink models (`system-prompt-injection` and `user-prompt-injection` kinds) for the `openai`, `agents`, `anthropic`, `google-genai`, `openrouter` and `langchain` frameworks. Tool and function descriptions (which are model-facing instructions) are now modeled as `system-prompt-injection` sinks across all of these frameworks.