release-react-router

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow reads GitHub pull requests and commit/PR history from remix-run/react-router, which constitutes reading outsider-submitted PR titles, descriptions, and comments.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill performs React Router software releases, which includes merging release PRs that trigger automated npm package publication and registry updates. Publishing packages to npm constitutes billable usage or service distribution handling, but does not involve direct financial transfers, charges, or user monetary transactions. This falls under indirect financial operations (submitting billable usage/publications). Therefore, the operation type is indirect.