pp-setlist-fm

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.80). The skill explicitly shows a CLI command that takes an API key argument (setlist-fm-pp-cli auth set-token <key>) and instructs running it (i.e., embedding the secret verbatim on the command line), which forces the LLM/agent to handle/output secret values directly even though env-var usage is also mentioned.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The runtime workflow is the locally executed setlist-fm-pp-cli (including --agent mode), which ingests only CLI arguments provided at runtime to choose specific setlist-fm queries rather than passively reading arbitrary outsider-authored free-text sources.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill provides go install commands that fetch and build remote Go modules at runtime (e.g., github.com/mvanhorn/printing-press-library/library/media-and-entertainment/setlist-fm/cmd/setlist-fm-pp-cli and the MCP module), which causes execution of remotely fetched code and is required for the CLI to function.