pp-clockify

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). SKILL.md requires executing arbitrary Clockify CLI commands (e.g., timesheet week --agent, search ... --agent) whose stdout/stderr JSON results are then used as agent context; those results can include outsider-authored free text (e.g., users’ time-entry descriptions, project/task/client names) coming from the Clockify workspace/API rather than the operating user.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill's runtime installation step calls "go install github.com/mvanhorn/printing-press-library/library/productivity/clockify/cmd/clockify-pp-cli@latest", which fetches and installs remote code that would be executed to provide the required CLI, so it is a runtime external dependency that executes remote code (github.com/mvanhorn/printing-press-library/library/productivity/clockify/cmd/clockify-pp-cli@latest)