pp-domain-goat

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). SKILL.md's Command Reference and recipes show the CLI performs live lookups against public RDAP/WHOIS/DNS/TLS/pricing endpoints (commands: rdap, whois, dns, cert, pricing, drops timeline, etc.) and the agent is expected to read and act on those JSON results (compare, shortlist, drops timeline), so untrusted public third‑party data can materially influence agent decisions.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill requires installing the CLI with the runtime command "npx -y @mvanhorn/printing-press install domain-goat --cli-only", which would fetch and execute remote package code from the npm registry at runtime and is a required dependency for the skill to run.