pp-airbyte-admin

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The required workflow is described as invoking airbyte-admin-pp-cli ... --agent, whose runtime behavior includes fetching Airbyte API data / reading the local SQLite store and returning results in JSON ("results": <data>); since those "results" can contain arbitrary free text originating from non-operator users/data (e.g., job descriptions, connector metadata, names/tags), this output can be fed back into the agent/LLM context as model-visible prose.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill requires installing a CLI by fetching and installing remote Go modules which will execute remote code at install time (go install github.com/mvanhorn/printing-press-library/library/cloud/airbyte-admin/cmd/airbyte-admin-pp-cli@latest and go install github.com/mvanhorn/printing-press-library/library/cloud/airbyte-admin/cmd/airbyte-admin-pp-mcp@latest), so these runtime installation URLs present a risk.