screenpipe-cli

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The skill includes a command to install pipes from GitHub or local paths (pipe install <url-or-path>), which can ingest outsider-authored markdown and prompt text from external repositories.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The skill instructs the execution of remote code via bun x screenpipe@latest, which is an unofficial package distributed through the npm registry without explicit provenance guarantees.