pp-coingecko

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). This skill explicitly queries the CoinGecko public API (see header "CoinGecko public API" and "HTTP Transport") and instructs agents to parse and act on live JSON responses ("Response envelope" — "Parse .results"), so untrusted third-party data from the open web can influence tool decisions and next actions.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). This skill instructs installers to fetch and install remote Go packages that will be executed by the agent (e.g., go install github.com/mvanhorn/printing-press-library/library/payments/coingecko/cmd/coingecko-pp-cli@latest and go install github.com/mvanhorn/printing-press-library/library/payments/coingecko/cmd/coingecko-pp-mcp@latest), which is high-confidence evidence that runtime-fetched code can be executed and can control agent behavior.