pp-wanderlust-goat

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's CLI explicitly fetches and ingests open web and user-generated sources (e.g., sync-city pulls Reddit threads, Wikipedia, Wikivoyage, Atlas Obscura and locale sites; reddit-quotes returns verbatim Reddit comments; near/status use Google Places, Tabelog/Naver and Reddit signals) and those live third-party contents are read and used to score/rank recommendations for agent-driven decisions, creating a clear vector for indirect prompt injection.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill requires installing and running a remote CLI (runtime install steps fetch and execute remote code) via commands such as "npx -y @mvanhorn/printing-press install wanderlust-goat" and "go install github.com/mvanhorn/printing-press-library/library/travel/wanderlust-goat/cmd/wanderlust-goat-pp-cli@latest", which fetch code from external repositories that will be executed and are a required dependency.