pp-public-param-golden

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.75). These links point to third‑party GitHub repositories and an npm (npx) installer that deliver prebuilt binaries/releases and MCP bundles (plus a placeholder API host), so they are not official vendor/CDN sources and represent a plausible malware distribution vector since they require downloading and executing unvetted binaries.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required runtime path is the MCP/CLI tool calling the upstream API and then returning the response body (JSON) into the agent context; this is outsider-authored free text in the sense of untrusted upstream data being ingested as LLM-readable content (e.g., stores_find → c.Get(...) → bound.EndpointResponse(...) → MCP tool result text).

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill's prerequisites instruct running an npx installer that will fetch and execute remote package code (npx -y @mvanhorn/printing-press-library install public-param-golden --cli-only) and points to a pre-built release download (https://github.com/mvanhorn/printing-press-library/releases/tag/public-param-golden-current), both of which are required install-time fetches that execute remote code to provide the CLI dependency.