pp-zimmo

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required workflow searches and reads external real estate property listings from Zimmo via the zimmo-pp-cli tool (live or local store), which ingests outsider-authored free text (property descriptions, listing details, and agent notes).

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill instructs the agent to download and install a remote binary from an unofficial GitHub Go repository at runtime, which constitutes an unverifiable operational dependency under the dependency gate.