pp-fred

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The skill’s runtime path is executing fred-pp-cli ... --agent, which fetches time-series/metadata from the St. Louis Fed FRED API (public web content) and ingests the returned JSON/prose into the agent context; this is outsider-authored content from a third-party API.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill instructs the runtime to fetch and run remote code as a required dependency (e.g., "npx -y @mvanhorn/printing-press-library install fred --cli-only" and "go install github.com/mvanhorn/printing-press-library/library/other/fred/cmd/fred-pp-cli@latest"), which downloads and executes external code during setup.