merge-deps

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill workflow monitors and consumes outsider-authored free text from GitHub pull request queues and GitLab merge request lists.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill triages, verifies, and merges dependency-bot pull/merge requests (Dependabot/Renovate) on GitHub and GitLab using gh and glab CLI commands. This constitutes direct financial/operational execution (merging code/dependency updates via platform CLIs). However, platform CLI integration requires existing user authentication and active credentials configured on the host machine (gh / glab CLI session credentials), satisfying the independent authentication requirement for direct operations.