pp-ahrefs

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's CLI explicitly fetches live third‑party web content (e.g., "site-audit page-content" and "site-explorer all-backlinks") via the Ahrefs API and exposes it to agents in Agent Mode (JSON on stdout / .results) for the agent to read and act on, so untrusted web content could indirectly inject instructions.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill instructs installing and running remote code as a required dependency (e.g., "npx -y @mvanhorn/printing-press install ahrefs --cli-only" and "go install github.com/mvanhorn/printing-press-library/library/marketing/ahrefs/cmd/ahrefs-pp-cli@latest"), which fetches and installs remote code that will be executed to provide the CLI used at runtime.