pp-openipa

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The required workflow is to run the bundled openipa-pp-cli which queries external IPA/PortaleServices/WS endpoints at runtime and ingests the returned (potentially outsider-authored) free-text/JSON into the agent context via the CLI’s stdout output; this is an outsider public-web/API content injection path.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill's prerequisites instruct a runtime install that fetches and executes remote code via the Go package path github.com/mvanhorn/printing-press-library/library/developer-tools/openipa/cmd/openipa-pp-cli@latest (go install), which is a required dependency for the CLI and thus can execute remote code.