Dependency Management for Cargo and npm

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The skill instructs running commands that fetch and inspect packages and advisories from public registries—e.g., npm install, cargo update (crates.io/npm registry) and cargo audit (RustSec advisories)—which are untrusted, user-published third‑party content the agent would read/interpret.