pp-sec-edgar

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required runtime workflow is executing the sec-edgar-pp-cli (SEC EDGAR read-only) which fetches SEC filings/full-text/Atom feed data from SEC endpoints and then returns it as JSON/provenance to the agent, so outsider-authored filing text can enter the agent’s LLM context via the CLI output.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill's prerequisite/install steps invoke remote installers that fetch and execute code at runtime (npx -y @mvanhorn/printing-press install sec-edgar and go install github.com/mvanhorn/printing-press-library/library/developer-tools/sec-edgar/cmd/sec-edgar-pp-cli@latest and github.com/mvanhorn/printing-press-library/library/developer-tools/sec-edgar/cmd/sec-edgar-pp-mcp@latest), so it relies on external code fetched and executed to run the skill.