boilerplate-update

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill explicitly instructs the agent to git clone a public GitHub repo (https://github.com/JUVOJustin/wordpress-plugin-boilerplate.git) and to read files under tmp/boilerplate-ref/docs/, so it fetches and interprets untrusted third‑party content that can influence subsequent diffing and update actions.