pp-opensnow

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required workflow is to run opensnow-pp-cli commands (e.g., forecast, snow-report, digest) which fetch live OpenSnow/meteorologist content at runtime and then pass the resulting readable text/JSON into the agent’s LLM context via --agent output.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). This skill's runtime install instructions call out-of-band package fetch/execute commands (npx -y @mvanhorn/printing-press and go install github.com/mvanhorn/printing-press-library/library/productivity/opensnow/cmd/opensnow-pp-cli@latest and go install github.com/mvanhorn/printing-press-library/library/productivity/opensnow/cmd/opensnow-pp-mcp@latest), which fetch and run remote code and are required for the skill to function.