pp-fathom

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill syncs and searches Fathom meeting transcripts, summaries, and action items, which contain user-submitted and participant-authored conversation text ingested via API.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The skill instructs the agent to install the CLI via npm from @mvanhorn/printing-press-library or via go install from github.com/mvanhorn/..., which are common/reputable unofficial third-party repositories supplying operational code.