dependabot-pr-handler

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill explicitly fetches and parses public, user-generated content during dependency research (e.g., npm registry via npm view, GitHub releases and CHANGELOG files and related PRs via the npm-research skill), and the agent is expected to read and interpret that third‑party content as part of its workflow.