source-command-upgrade-deps

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The skill’s runtime workflow includes “Search for the package's changelog using GitHub search or web search” and then “read CHANGELOG.md… or GitHub releases” via gh api/MCP GitHub tools/WebSearch, which can ingest outsider-authored free text (public changelog/release notes) into the agent’s LLM context.