use-paper-cli

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow reads and lists comment threads (list_comment_threads) and user-facing design files which can contain untrusted outsider-authored text and comments.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The skill references https://github.com/lassejlv/paper-cli as an installation dependency and an MCP endpoint at http://127.0.0.1:29979/mcp, but these are third-party/unofficial community repositories or local loopback addresses rather than verified first-party publisher sources.