pp-mobalytics-lol

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). The required runtime workflow invokes mobalytics-lol-pp-cli --agent, whose operations are described as calling external/browser-facing endpoints (HTTP transport / CDN data and/or API), so the CLI’s returned free-text/JSON payload from outsider sources can enter the agent’s LLM context via stdout.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). This skill includes installation commands that fetch and execute remote code required at runtime (e.g., the Go module github.com/mvanhorn/printing-press-library/library/media-and-entertainment/mobalytics-lol/cmd/mobalytics-lol-pp-cli@latest and the MCP module github.com/mvanhorn/printing-press-library/library/media-and-entertainment/mobalytics-lol/cmd/mobalytics-lol-pp-mcp@latest), so it relies on external content that will be executed when installing the required CLI.