verify-dependabot-pr

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's required workflow explicitly fetches and parses open/public third-party content (GitHub releases and repo CHANGELOG.md via gh API, npm registry pages, and upstream commit diffs) to determine behavior changes, so untrusted release notes/commit messages could influence the agent's decisions.