dependency-upgrade

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly instructs the agent to read public changelogs and migration docs (e.g., "Read CHANGELOG.md and MIGRATION.md" and the example curl to https://raw.githubusercontent.com/facebook/react/main/CHANGELOG.md) and to use tools like npx/npm-check-updates that fetch data from public registries, so it will ingest untrusted, user-controlled third-party content that could contain actionable instructions.