dependency-upgrade

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's required workflow instructs the agent to read third‑party changelogs (e.g., "Read CHANGELOG.md and MIGRATION.md" and the explicit curl example fetching https://raw.githubusercontent.com/facebook/react/main/CHANGELOG.md), which are public GitHub content that the agent would ingest and could influence upgrade decisions and actions.