pp-here-now

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). Low exposure: the required workflow is a CLI (here-now-pp-cli via direct use or --agent) whose runtime reads only user-selected CLI arguments such as specific Site Data collections (e.g., publishes data list-site-records my-site signups) and does not indicate that outsider-authored free text is ingested from arbitrary feeds/queues without the agent choosing an explicit target.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill's setup includes runtime installation commands that fetch and execute remote code from GitHub (go install github.com/mvanhorn/printing-press-library/library/cloud/here-now/cmd/here-now-pp-cli@latest and .../here-now-pp-mcp@latest), which are required to run the CLI and thus represent an external code-execution dependency.