coderabbit-upgrade-migration

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly instructs the agent to open and review public third-party pages (e.g., "open https://github.com/coderabbit/sdk/releases" and links to https://docs.coderabbit.com/migration) as a required workflow step, meaning untrusted external changelog/docs would be read and could materially influence upgrade actions.