pp-forgejo

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The forgejo-pp-cli invoked by this skill can read Forgejo-host content such as issues/PRs/notifications via commands like repos issue-search-issues and notifications notify-get-thread, so an outsider-submitted item in a monitored Forgejo instance can become LLM-ingested when the workflow runs those read commands.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill includes runtime install commands that fetch and execute remote code (e.g., "go install github.com/mvanhorn/printing-press-library/library/developer-tools/forgejo/cmd/forgejo-pp-cli@latest" and the npx installer "@mvanhorn/printing-press-library"), so it relies on external content fetched at runtime which will execute code on install.