pp-setlist-fm

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill explicitly shows the insecure pattern setlist-fm-pp-cli auth set-token <key> (passing an API token as a command-line argument) which requires the agent to handle and embed a secret value verbatim, creating an exfiltration risk.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required workflow runs a third-party CLI (setlist-fm-pp-cli) in --agent mode that fetches setlist data from setlist.fm / upstream sources at runtime and returns it as JSON on stdout, which the agent then ingests into the LLM context (outsider-authored web content via live API responses).

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill's prerequisite and MCP installation steps explicitly run "go install" on remote modules (github.com/mvanhorn/printing-press-library/library/media-and-entertainment/setlist-fm/cmd/setlist-fm-pp-cli@latest and github.com/mvanhorn/printing-press-library/library/media-and-entertainment/setlist-fm/cmd/setlist-fm-pp-mcp@latest), which fetch and execute remote code at runtime to provide required CLI binaries.