audit-allow-builds

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required workflow includes fetching outsider-authored free text from public sources at runtime—e.g., npm view <package>@<version> scripts ... and pnpm audit/Socket package pages—whose returned script text and advisories are then used in the agent’s context for review.