pp-elezioni-sicilia

Warn

Audited by Snyk on Jul 28, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.75). This workflow includes fetching election data from live external web/API sources (via the CLI’s “HTTP Transport”/API calls) and the resulting free-form text/JSON is returned to the agent at runtime as the LLM-readable stdout --agent output.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

  • Potentially malicious external URL detected (high risk: 0.90). The skill's prerequisite/install steps require fetching and installing remote Go modules which will download and build/execute remote code at runtime (github.com/mvanhorn/printing-press-library/library/other/elezioni-sicilia/cmd/elezioni-sicilia-pp-cli@latest and github.com/mvanhorn/printing-press-library/library/other/elezioni-sicilia/cmd/elezioni-sicilia-pp-mcp@latest), and the CLI is required for the skill to run.

Issues (2)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

W012
MEDIUM

Unverifiable external dependency detected (runtime URL that controls agent).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jul 28, 2026, 09:18 AM
Issues
2
Security Audit — snyk — pp-elezioni-sicilia