pp-skool

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). This skill explicitly reads user-generated content from Skool (skool.com) — e.g., "skool-pp-cli posts top" returns full post bodies and "skool-pp-cli digest since"/"classroom export" ingest posts, comments and lessons from community feeds — which the agent is expected to parse and which can materially influence subsequent actions (including webhook delivery), so untrusted third-party content could inject instructions.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill explicitly requires fetching and running remote code to install the required CLI (e.g., via npx -y @mvanhorn/printing-press and go install github.com/mvanhorn/printing-press-library/library/other/skool/cmd/skool-pp-mcp@latest), which downloads and executes external code that the skill depends on.