paperzilla

Pass

Audited by Gen Agent Trust Hub on Oct 24, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses the pz CLI to list projects, browse feeds, and retrieve paper details.
  • [EXTERNAL_DOWNLOADS]: Installation instructions utilize official vendor repositories on GitHub and the pz update command manages binary updates from the Paperzilla infrastructure.
  • [DATA_EXFILTRATION]: The CLI manages session authentication by storing and accessing tokens in the local ~/.paperzilla/tokens.json directory.
  • [PRIVILEGE_ESCALATION]: Documentation includes instructions for trusting the vendor's Homebrew tap (brew trust) if required by the environment's security policies.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes external research data and markdown content, which represents a potential attack surface for indirect prompt injection.
  • Ingestion points: pz rec and pz paper commands for retrieving markdown content.
  • Boundary markers: None identified in the instruction set.
  • Capability inventory: Shell command execution via the pz tool.
  • Sanitization: No explicit content filtering or validation is described for the retrieved markdown.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 24, 2026, 09:29 PM