pp-arxiv

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The skill’s runtime path is executing arxiv-pp-cli query against the arXiv API (public web content) and ingesting the returned paper metadata into the agent’s JSON/LLM context via --agent output; this is outsider-authored free text from a public source.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill's prerequisite install commands fetch and execute remote code at runtime (e.g., "npx -y @mvanhorn/printing-press install arxiv --cli-only" and "go install github.com/mvanhorn/printing-press-library/library/other/arxiv/cmd/arxiv-pp-cli@latest"), so these external sources could execute remote code and are required for the skill to run.