pp-context-dev

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The skill explicitly shows and instructs using a command that embeds a token on the command line ("context-dev-pp-cli auth set-token YOUR_TOKEN_HERE"), which requires including secret values verbatim in generated commands and thus poses an exfiltration risk.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required runtime workflow for this skill is to run context-dev-pp-cli with --agent on user-supplied targets (e.g., scrape/crawl/extract/styleguide/screenshot/source-pack), which causes the CLI to fetch and convert outsider-authored public web page content into LLM-readable Markdown/JSON that is then returned in the agent’s context.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill's prerequisite installation runs remote code (via "npx -y @mvanhorn/printing-press-library install context-dev --cli-only" and "go install github.com/mvanhorn/printing-press-library/library/ai/context-dev/cmd/context-dev-pp-cli@latest"), which fetches and executes external content at install time and is required for the skill to run.