deps

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). Phase 2 ("Alternative Discovery") explicitly directs the agent to run WebSearch queries (e.g., "WebSearch: 'alternative to [package-name] npm 2026'") and to read/search results to choose and record alternatives, which are open/public web pages (untrusted third‑party content) that can influence upgrade/replacement decisions.