pp-scrape-creators

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The skill is a “Printing Press CLI” that fetches public social-media content at runtime (e.g., via commands like facebook list-post, reddit list-search, youtube list-video-2, threads list-search, etc.), and that fetched free-form text (captions, comments, descriptions) is returned as JSON results that the agent will ingest into its LLM context—an indirect prompt-injection channel from outsider-authored content.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). This skill's prerequisite install commands (npx -y @mvanhorn/printing-press install scrape-creators --cli-only and go install github.com/mvanhorn/printing-press-library/library/developer-tools/scrape-creators/cmd/scrape-creators-pp-cli@latest) fetch remote code and build/execute the CLI at runtime and the skill requires that CLI, so these are runtime external dependencies that execute remote code.