pp-nejm

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The runtime path is the NEJM CLI itself (e.g., nejm-pp-cli openalex search ... / sync), which ingests outsider-authored free text via the user-supplied --query string and/or retrieved OpenAlex abstracts/metadata that originate from external authorship.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill's installation instructions include go install commands that fetch and build remote code from GitHub (go install github.com/mvanhorn/printing-press-library/library/health/nejm/cmd/nejm-pp-cli@latest and go install github.com/mvanhorn/printing-press-library/library/health/nejm/cmd/nejm-pp-mcp@latest), which will execute remote code during setup and are relied on as required dependencies.