pp-open-library

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The skill runs open-library-pp-cli to search/resolve/fetch metadata from Open Library (via explicit Open Library work/ISBN/author queries), so any outsider-authored free text injection would only be ingested if the agent first supplies specific outsider-controlled query terms/IDs for the tool to fetch.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The SKILL includes a setup command that runs "go install github.com/mvanhorn/printing-press-library/library/media-and-entertainment/open-library/cmd/open-library-pp-cli@latest", which fetches remote source and builds/installs executable code that the skill requires and may be executed at runtime.