pp-bandsintown

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill drives a CLI that explicitly fetches live public Bandsintown data (see commands like pull, events, artists, sea-radar, and the response envelope with "meta.source":"live" in SKILL.md), ingests that untrusted/public event and lineup content, and uses it to compute routing, co-bill, and trend decisions that can materially change agent actions.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill's prerequisite/install steps fetch and execute remote code at runtime (via npx -y @mvanhorn/printing-press install bandsintown --cli-only and the Go install target github.com/mvanhorn/printing-press-library/library/media-and-entertainment/bandsintown/cmd/bandsintown-pp-cli@latest), so the externally hosted repository is a required runtime dependency that can run code on the host.