pp-stac

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The STAC Printing Press CLI in agent mode (stac-pp-cli … --agent) reads STAC API query results/items from a configured STAC API/search for satellite imagery, meaning attacker-controlled free-text metadata inside those externally sourced STAC items can be ingested at runtime.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill's prerequisite/install commands fetch and execute remote code required at runtime (e.g., "npx -y @mvanhorn/printing-press-library install stac --cli-only" and "go install github.com/mvanhorn/printing-press-library/library/maps/stac/cmd/stac-pp-cli@latest"), so these external install endpoints are runtime dependencies that execute remote code.