pp-apartments

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's required commands (e.g., apartments-pp-cli listing and apartments-pp-cli rentals and the sync/watch/digest flows) explicitly fetch and parse live Apartments.com HTML (schema.org microdata) from the public web, and the agent is expected to read and act on that parsed listing content to rank, compare, digest, and make decisions, so untrusted third-party page content could indirectly inject instructions or influence behavior.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill explicitly instructs runtime installation that fetches and executes third‑party code (via "npx -y @mvanhorn/printing-press install apartments" and "go install github.com/mvanhorn/printing-press-library/library/other/apartments/cmd/apartments-pp-cli@latest"), so the GitHub module path github.com/mvanhorn/printing-press-library/library/other/apartments/cmd/apartments-pp-cli@latest is flagged as a runtime external dependency that can execute remote code.