From 3948f3f4aac5fe17ab9dc7773fec087a548618d7 Mon Sep 17 00:00:00 2001
From: Sotiris Dragonas <36576941+BazookaMusic@users.noreply.github.com>
Date: Thu, 2 Jul 2026 16:13:03 +0200
Subject: [PATCH] Note tool-description coverage in prompt-injection change
 note

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
---
 .../ql/lib/change-notes/2026-06-18-prompt-injection-models.md   | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/python/ql/lib/change-notes/2026-06-18-prompt-injection-models.md b/python/ql/lib/change-notes/2026-06-18-prompt-injection-models.md
index 2390cd721f9..60f066e90e2 100644
--- a/python/ql/lib/change-notes/2026-06-18-prompt-injection-models.md
+++ b/python/ql/lib/change-notes/2026-06-18-prompt-injection-models.md
@@ -1,4 +1,4 @@
 ---
 category: minorAnalysis
 ---
-* Added prompt-injection sink models (`system-prompt-injection` and `user-prompt-injection` kinds) for the `openai`, `agents`, `anthropic`, `google-genai`, `openrouter` and `langchain` frameworks.
+* Added prompt-injection sink models (`system-prompt-injection` and `user-prompt-injection` kinds) for the `openai`, `agents`, `anthropic`, `google-genai`, `openrouter` and `langchain` frameworks. Tool and function descriptions (which are model-facing instructions) are now modeled as `system-prompt-injection` sinks across all of these frameworks.