pp-printing-press-rich
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The installation instructions utilize
npxto download and execute the@mvanhorn/printing-press-librarypackage from the NPM registry, which is the vendor's documented distribution method. \n- [COMMAND_EXECUTION]: The skill implements asqltool for local data analysis. It includes a security validator (validateReadOnlyQuery) that restricts input to singleSELECTorWITHstatements and uses read-only database connections to prevent unauthorized modifications. \n- [COMMAND_EXECUTION]: All CLI commands from theprinting-press-rich-pp-clibinary are mirrored as agent tools usingcobratree.RegisterAll, allowing the agent to perform documented CLI operations. \n- [DATA_EXPOSURE]: Theagent-contextcommand andcontexttool expose resolved filesystem paths for the CLI's configuration and data directories to provide environment awareness to the AI agent.
Audit Metadata