pp-clickup

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill interacts with ClickUp via a CLI tool (clickup-pp-cli), which accesses tasks, comments, chat messages, and documents. These contain user and outsider-authored content that the agent reads and ingests at runtime when performing search, sync, or viewing tasks and comments.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill instructs the agent to install a package via npx from @mvanhorn/printing-press-library or compile/install a Go package from github.com/mvanhorn/printing-press-library, which is an unofficial personal repository and constitutes a high-risk unknown external dependency.