gpc-metadata-sync

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The skill's workflow (SKILL.md and references/directory-structure.md) explicitly runs commands like "gpc listings pull" and "gpc listings analyze" that fetch live app listings from the Google Play Store/Play Console (public, third‑party listing content), which the tool reads and uses to decide what to push/sync, so untrusted external listing data can influence actions.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). detect_gpc.mjs explicitly runs "npx gpc --version" (and the docs reference "npm install -g @gpc-cli/cli"), which can fetch and execute the @gpc-cli/cli package from the npm registry at runtime, so the skill may execute remote code fetched during runtime.