pp-hotel-tonight

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The SKILL.md explicitly says the CLI "syncs the anonymous deal feed into a local SQLite store" and provides live-read commands (e.g., inventory, watch, daily-drop, history, verdict) that fetch HotelTonight's live/public deal data and expect the agent to read and act on those results, so third-party public content can influence agent decisions.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill requires running remote installers (e.g., "npx -y @mvanhorn/printing-press install hotel-tonight --cli-only") or fetching and building code via "go install github.com/mvanhorn/printing-press-library/library/travel/hotel-tonight/cmd/hotel-tonight-pp-cli@latest" (and the analogous mcp module), which fetches remote code that is compiled/executed and is a required dependency for the skill.