dependabot-rollup

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In Step 2 the workflow uses gh pr list to fetch open Dependabot PR metadata (including free-text title) from a specified GitHub repository (--repo) at runtime, so outsider-authored PR titles are ingested for classification without pre-selecting specific items.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill runs git fetch against the runtime URL "https://github.com/${REPO}.git" (SKILL.md:119) to pull remote commits and later runs install/validation (yarn install, yarn nx), so fetched repository content is retrieved at runtime and can cause execution of remote code.