dependency-upgrade

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill instructs the agent to fetch and read public changelogs and migration docs (e.g., curl https://raw.githubusercontent.com/facebook/react/main/CHANGELOG.md and "Read CHANGELOG.md and MIGRATION.md"), which are open/public third‑party sources the agent would ingest and interpret as part of its workflow.