pp-pdok-location

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required runtime workflow can fetch PDOK upstream data (Locatieserver/Location API) and return it as readable JSON/GeoJSON to the agent via pdok-location-pp-cli ... --agent (i.e., outsider-authored free text/records from public web services are ingested into LLM context).

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill's prerequisites explicitly instruct fetching and executing remote code as a required dependency via "npx -y @mvanhorn/printing-press-library install pdok-location --cli-only" and "go install github.com/mvanhorn/printing-press-library/library/developer-tools/pdok-location/cmd/pdok-location-pp-cli@latest", which will download and run remote code to install the CLI needed at runtime.