pp-table-reservation-goat

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill explicitly queries public reservation networks (OpenTable, Tock, Resy) as described throughout SKILL.md (e.g., the "goat", "availability check", and "watch" commands) and ingests their live results for the agent to parse and act on (searching, booking, polling), so untrusted third‑party web content can influence subsequent tool use and decisions.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill's prerequisite installs remote code at runtime via the npx installer command "npx -y @mvanhorn/printing-press install table-reservation-goat --cli-only", which fetches and executes package code and is presented as a required install step for the CLI.