repo-maintenance-node

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill explicitly queries GitHub for open Renovate PRs (B1: gh pr list ...) and parses PR titles from those user-generated PRs to collect package names that are then used to filter outdated dependencies, meaning untrusted third-party content from GitHub is ingested and can materially change subsequent actions.