fix-dep-vulns

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required workflow instructs the agent to fetch package JSON metadata via curl from PyPI (https://pypi.org/pypi/<pkg>/<version>/json), which retrieves repository package metadata and dependency strings authored by external package maintainers.