expo-cicd-workflows

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required runtime workflow fetches public web content (e.g., https://api.expo.dev/v2/workflows/schema and GitHub raw .mdx docs) via scripts/fetch.js, and that fetched free-form text/JSON is then parsed and used in the agent’s context for validation/generation.