pp-stac

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill’s required runtime workflow runs the stac-pp-cli binary, which at command time searches STAC APIs (e.g., “AWS Earth Search” by default) and ingests response item/scene JSON containing free text fields originating from the outsider-authored dataset/providers.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill directs runtime installation of a required CLI by fetching and installing remote code (e.g., "go install github.com/mvanhorn/printing-press-library/library/maps/stac/cmd/stac-pp-cli@latest" and "npx -y @mvanhorn/printing-press-library install stac --cli-only"), so these external package endpoints are used to fetch and execute remote code required for the skill.