upgrade-deps

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). Yes—scripts/discover.sh reads free-form text from outsider-authored sources at runtime (e.g., gh pr list outputs open Renovate/Dependabot PR titles/labels, and npm audit/govulncheck/cargo audit/pip-audit/osv-scanner emit advisory text), and that stdout is then ingested into the agent’s LLM context as part of the discovery output.