pocket-recordings-transcripts

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). Pocket tool runtime ingests only developer/user-supplied tool inputs like search_recordings.query and then returns the user’s own Pocket recordings/transcripts, not outsider-authored free text from a public feed or queue without the workflow selecting specific items.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill calls the AgentPMT MCP/REST endpoints (e.g., https://api.agentpmt.com/mcp/ and https://api.agentpmt.com/products/purchase) at runtime to fetch live schema and "get_instructions" which are treated as authoritative instructions that directly control agent behavior.