gsd-update

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The required workflow is the update workflow which (per SKILL.md) performs “changelog fetching and display” and “npm version checking,” which at runtime typically involves fetching release/changelog text from the public npm registry (outsider-authored free text) and then injecting it into the agent’s LLM context for display/preview.