package-json-maintenance

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The skill runs package-manager queries and audits (e.g., npm audit --json, npm view <pkg> version, pnpm view, yarn audit) against public registries and package metadata, which are open, user-published third-party content that the agent parses and interprets as part of its workflow.