pp-cookunity

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). cookunity-pp-cli’s runtime reads CookUnity meal/menu data from the logged-in account’s live/API responses during sync/menu syncing, and then the agent mode returns that locally-synced content via commands like meals/drift without filtering to trusted first-party text only.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill requires installing and running a remote CLI via installer commands that fetch and execute remote code (e.g., "npx -y @mvanhorn/printing-press-library install cookunity --cli-only" and the Go module installs "go install github.com/mvanhorn/printing-press-library/library/food-and-dining/cookunity/cmd/cookunity-pp-cli@latest" and "go install github.com/mvanhorn/printing-press-library/library/food-and-dining/cookunity/cmd/cookunity-pp-mcp@latest"), which are runtime fetch-and-execute steps needed for the skill to work.