update-container-images

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The workflow queries public container registries (Docker Hub, GitHub Container Registry, etc.) for container tags, which are selected and ingested into the LLM report. Since container tags and public registry metadata are published by third-party maintainers/outsiders and fetched during execution, this represents an indirect prompt injection risk via external search/fetch.