codebase-cleanup-deps-audit

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required runtime workflow performs vulnerability/license scanning by calling external public APIs/registries (e.g., npm security advisories via https://registry.npmjs.org/... and other ecosystem endpoints), which returns free-text fields like advisory overviews/descriptions that the agent would ingest into its LLM context.