batch-dependency-bumps

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow’s runtime path “Read the incoming PRs” instructs taking PR numbers/URLs from the request and then reading their contents via gh pr diff <n>, which ingests outsider-authored PR text/diffs provided by external users (via the request selecting PRs from GitHub).