pp-google-play

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). SKILL.md instructs the CLI to “Pull app details…from the public Play Store” and to “snapshot charts and listings into a local database”; that means runtime LLM-visible stdout (JSON) is sourced from outsider-authored public web/app/review text scraped from Google Play (indirect prompt injection risk via untrusted store content).

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill includes a runtime installation command that fetches and builds remote code via "go install github.com/mvanhorn/printing-press-library/library/marketing/google-play/cmd/google-play-pp-cli@latest", which executes third-party code to produce the required CLI binary.