pp-goodreads

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In the required runtime workflow, outsider-authored free text can be ingested via agent-supplied inputs that the CLI will submit/parse (e.g., review text and JSON-form fields passed through review create-update --stdin), so an outsider can poison those fields directly before any “specific item” selection.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill requires installing the CLI by fetching and building remote code (e.g., "go install github.com/mvanhorn/printing-press-library/library/media-and-entertainment/goodreads/cmd/goodreads-pp-cli@latest"), which downloads and executes code during setup and is a required runtime dependency.