batch-migration

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The Dependency Upgrade recipe explicitly instructs the agent to "Changelog review: Read the upgrade guide / migration docs" and to "Fix breaking changes: Apply transforms from changelog", which requires fetching and acting on public third‑party upgrade docs whose instructions can materially change automated code-modification behavior.