homebrew-formula-maintenance

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly fetches and parses PyPI package metadata/sdist URLs (e.g., "curl -s https://pypi.org/pypi///json" and the generate_resources.py script) — public, user-published content that the workflow and scripts ingest and the agent is expected to read/interpret to regenerate formula resource blocks.