pp-autotempest

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The AutoTempest Printing Press CLI is described as a read-only vehicle listings search tool that fetches and parses marketplace listing content during commands like find, drops, dedupe, etc., so outsider-authored free text from those listings can be ingested at runtime without a need to pre-select a specific item.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill's prerequisite/install steps require fetching and running remote code (e.g., the npx installer and Go module installs such as "go install github.com/mvanhorn/printing-press-library/library/commerce/autotempest/cmd/autotempest-pp-cli@latest"), so the skill can cause execution of externally fetched code at runtime.