pp-adminbyrequest

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.78). The required workflow runs an external CLI that fetches live Admin By Request tenant data (including free-text fields like deniedReason/events.eventText) and returns it as JSON to the agent, so outsider-authored free text from prior users/workflows can be read into the agent’s LLM context via the CLI stdout output.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill includes an explicit installation command that may be executed at runtime—"go install github.com/mvanhorn/printing-press-library/library/devices/adminbyrequest/cmd/adminbyrequest-pp-cli@latest"—which fetches and builds remote code that the skill requires, so this is a runtime external dependency that executes remote code.