pp-openalex

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The agent queries OpenAlex scholarly works, authors, and metadata via the CLI tool, which indexes public research papers and metadata authored by external academics.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The skill references an external Go module path (github.com/mvanhorn/printing-press-library/...) and an npm package (@mvanhorn/printing-press-library) for runtime installation, but these third-party GitHub-hosted and npm-registry packages lack strong official first-party provenance, making them a medium-tier unofficial operational dependency.