pp-ankiweb

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). SourceName=AnkiWeb shared-deck browsing/search; runtime path involves executing ankiweb-pp-cli shared search/info/list-decks in --agent mode, which ingests free-text deck metadata (e.g., titles/reviews) returned by AnkiWeb’s public shared-deck catalog that can be influenced by outsiders who author decks.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill's prerequisites instruct running remote installers that fetch and execute code at runtime (npx -y @mvanhorn/printing-press-library install ankiweb --cli-only and go install github.com/mvanhorn/printing-press-library/library/education/ankiweb/cmd/ankiweb-pp-cli@latest), so it relies on external content that will execute during installation.