pp-1688

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required workflow can fetch and ingest live 1688.com offer/detail page content (outsider-authored public web text) into the CLI’s JSON output, which the agent then parses/places into LLM context via --agent/stdout (e.g., offers <offer_id> and search/sync commands described in SKILL.md).

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill instructs running go install github.com/mvanhorn/printing-press-library/library/commerce/1688/cmd/1688-pp-cli@latest and go install github.com/mvanhorn/printing-press-library/library/commerce/1688/cmd/1688-pp-mcp@latest, which fetch and execute remote code during installation and are presented as required dependencies for the CLI—this is a runtime external dependency that executes remote code.