pp-greenhouse

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The agent’s required runtime path uses greenhouse-pp-cli jobs list/get against the Public Greenhouse Job Board API, where the CLI will read outsider-authored free text from public job postings (and related fields) at runtime.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill instructs runtime installation via "go install github.com/mvanhorn/printing-press-library/library/other/greenhouse/cmd/greenhouse-pp-cli@latest", which fetches and builds remote code that the agent will execute as a required CLI dependency (github.com/mvanhorn/printing-press-library/library/other/greenhouse/cmd/greenhouse-pp-cli@latest).