dependency-update

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly requires "access to changelogs/release notes" in SKILL.md and references/process.md shows fetching a public GitHub release URL (curl https://github.com/owner/package/releases/tag/v2.0.0), meaning the agent is expected to ingest untrusted, user-generated web content that can change update decisions and actions.