paperzilla
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
pzCLI to list projects, browse feeds, and retrieve paper details. - [EXTERNAL_DOWNLOADS]: Installation instructions utilize official vendor repositories on GitHub and the
pz updatecommand manages binary updates from the Paperzilla infrastructure. - [DATA_EXFILTRATION]: The CLI manages session authentication by storing and accessing tokens in the local
~/.paperzilla/tokens.jsondirectory. - [PRIVILEGE_ESCALATION]: Documentation includes instructions for trusting the vendor's Homebrew tap (
brew trust) if required by the environment's security policies. - [INDIRECT_PROMPT_INJECTION]: The skill processes external research data and markdown content, which represents a potential attack surface for indirect prompt injection.
- Ingestion points:
pz recandpz papercommands for retrieving markdown content. - Boundary markers: None identified in the instruction set.
- Capability inventory: Shell command execution via the
pztool. - Sanitization: No explicit content filtering or validation is described for the retrieved markdown.
Audit Metadata