update-packages

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The workflow fetches release notes from GitHub API (api.github.com/repos/...) and package information from npm registry, which are external services, but the prompt injection risk is evaluated as low because the agent actively fetches specific package updates and release notes rather than monitoring an untrusted communication channel.