dependency-license-audit

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill instructs the agent to audit dependency trees by cloning repositories or scanning local checkouts and parsing ecosystem registry outputs (such as package names, descriptions, and license metadata), which constitute outsider-authored free text read at runtime.