batch-update

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's required research steps (references/research-brief.md and Workflow step 7: "delegate read-only research to subagents when available, otherwise research inline") explicitly instruct the agent to consult release notes/changelogs and external web/docs and to record exact sources, meaning untrusted public third-party content will be fetched and used to decide updates.