dependabot-rollup

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In Step 2 the workflow runs gh pr list to fetch open Dependabot PR metadata (including title) from the target repository, and Step 3 then parses that free text from PR titles at runtime.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill performs runtime git fetches against the target repository URL "https://github.com/${REPO}.git" (SKILL.md:128) and then runs validation (yarn install / yarn nx) which executes the fetched repository's code, so this remote URL is a runtime dependency that can cause execution of remote code.