pp-squarespace

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). SKILL.md describes using the squarespace-pp-cli ... --agent commands that return JSON from an authenticated Squarespace account, and those API responses become LLM-readable context via the agent’s tool/output loop (outsider-authored account data the operating user did not author verbatim).

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill's installation steps instruct running remote installers that fetch and execute code at runtime (e.g., npx -y @mvanhorn/printing-press-library install squarespace --cli-only and go install github.com/mvanhorn/printing-press-library/library/commerce/squarespace/cmd/squarespace-pp-cli@latest), so it relies on external content executed during setup.