Adjust `@security-severity` metadata for XSS and log injection queries
go/autobuilder/package-not-found
overlay[loca]