pp-wikipedia

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). This skill uses the wikipedia-pp-cli to fetch live Wikipedia content (e.g., page get-html, page get-summary, page get-random, and feed commands) — public, user-generated pages from the Wikipedia REST API — which the agent is expected to read and could allow instructions in third-party content to influence subsequent actions.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill instructs installing and/or invoking remote code as a required dependency (e.g., "npx -y @mvanhorn/printing-press install wikipedia --cli-only" and "go install github.com/mvanhorn/printing-press-library/library/media-and-entertainment/wikipedia/cmd/wikipedia-pp-cli@latest"), which fetches and can execute remote code that the skill depends on.