pp-anylist

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's Command Reference includes "recipes import — Import a recipe from a URL", which shows the CLI fetches and parses arbitrary third‑party webpages (recipe content) that the agent would read and act on (e.g., adding ingredients to lists), exposing it to untrusted web content.