apply-dependency-prs

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The skill's Discovery phase explicitly requires fetching and reading GitHub PR metadata and diffs (via gh pr view / gh pr diff and extracting owner/repo from URLs), so it ingests untrusted, user-generated third-party content (PR descriptions/diffs) that directly determines actions like which versions to apply.