pp-squarespace

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill instructs the agent to install a package via npx from an arbitrary personal GitHub user scope (@mvanhorn/printing-press-library), presenting a weak/unknown provenance operational dependency.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 0.70). The skill provides access to Squarespace Commerce and order-management commands such as create-order, fulfill-order, and adjusting inventory stock levels via the squarespace-pp-cli binary. These constitute direct financial/commercial transaction and inventory operations. Authentication relies on API tokens or OAuth (COMMERCE_AUTHORIZATION), but independent validation/enforcement of permissions and payment rules is handled by the upstream Squarespace service layer rather than custom agent controls.