pp-printing-press-oauth2
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires a CLI binary for core functionality and provides installation instructions via
npx -y @mvanhorn/printing-press-libraryand manual binary downloads from GitHub. These resources are provided by the skill author and are consistent with the tool's intended setup process. - [COMMAND_EXECUTION]: The skill operates by driving the
printing-press-oauth2-pp-clicommand-line tool to interact with the target API and manage local state, such as authentication tokens and query history. - [REMOTE_CODE_EXECUTION]: The recommended installation path utilizes
npxto download and execute the@mvanhorn/printing-press-librarypackage to provision the necessary binary. This represents a vendor-managed remote code execution pattern for tool distribution. - [PROMPT_INJECTION]: The skill processes data from external API responses and a local learning loop (SQLite database and journal logs), presenting an indirect prompt injection attack surface.
- Ingestion points: Untrusted data enters the context via API responses from the configured
base_urland local stored learnings indata.dbandteach.log. - Boundary markers: None identified; the skill instructions do not mandate the use of delimiters or 'ignore' instructions when the agent processes retrieved data.
- Capability inventory: The skill allows shell execution via the agent's bash tools and performs network operations and local filesystem writes through the CLI binary.
- Sanitization: The underlying Go code implements structural JSON sanitization and PII masking, but lacks specific mechanisms to sanitize natural language instructions embedded within data.
Audit Metadata