dependency-upgrade

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill explicitly instructs fetching and reading third‑party content (e.g., "curl https://raw.githubusercontent.com/facebook/react/main/CHANGELOG.md") and to install/inspect packages from public registries (npm/npx), meaning the agent would consume untrusted, user-generated web content as part of its workflow.