pi-extension-sync

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The workflow reads changelogs, official documentation, and release information from npm and GitHub, which are low-risk active fetch sources of provider-authored and registry documentation.