printing-press-import

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly fetches and clones content from the public GitHub repo mvanhorn/printing-press-library (via gh api and git clone) and reads registry.json, per-CLI manifest.json and .printing-press.json to resolve candidates and decide overwrite/import actions, so untrusted third-party content directly influences agent decisions and tool use.