deps-minor

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill runs ncu --target minor --jsonAll and npm install, which fetch package metadata and install packages from the public npm registry (untrusted, user-published third-party code) and then uses those packages during validation steps, exposing the agent to potentially malicious third-party content.