printing-press-amend

Pass

Audited by Gen Agent Trust Hub on Oct 9, 2026

Risk Level: SAFEDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
  • [DATA_EXFILTRATION]: The skill generates and submits pull requests to the mvanhorn/printing-press-library GitHub repository. These PRs include code patches, plan documentation, and issue reports derived from the developer's local session history. To address privacy concerns, a mandatory Phase 5 PII scrub is executed to redact credentials, entities, and unauthorized capitalized phrases before any data leaves the local environment.
  • [INDIRECT_PROMPT_INJECTION]: The skill represents a surface for indirect prompt injection because it ingests and parses Claude Code session transcripts from ~/.claude/projects/. These transcripts contain conversational history that may include untrusted or adversarial instructions.
  • Ingestion points: Session transcript JSONL files located in ~/.claude/projects/, accessed during Phase 1a.
  • Boundary markers: The skill requires the user to explicitly confirm the resolved transcript path via AskUserQuestion and presents a tiered finding list for approval at a scope-confirmation checkpoint before any modifications occur.
  • Capability inventory: The skill leverages git, gh, go build, and the Bash tool to modify source code and interact with remote repositories.
  • Sanitization: Implements a multi-layered PII scrub (Phase 5) targeting credentials and project-specific entities to sanitize outgoing artifacts.
  • [REMOTE_CODE_EXECUTION]: The setup contract in SKILL.md instructs the user to install or update the vendor's CLI binary using go install github.com/mvanhorn/cli-printing-press/v4/cmd/cli-printing-press@latest if a current version is not detected.
  • [EXTERNAL_DOWNLOADS]: Fetches version support information from the vendor's public GitHub repository: https://raw.githubusercontent.com/mvanhorn/cli-printing-press/main/supported-versions.txt.
  • [COMMAND_EXECUTION]: Orchestrates various developer tools including git (for managing the managed clone), gh (for GitHub API interactions and PR creation), go (for build and testing), and text processing utilities like awk, sed, and jq for data normalization.
  • [DYNAMIC_EXECUTION]: During the autonomous Phase 4, the skill executes go build, go vet, and govulncheck via a publish validate command to ensure the stability and security of the generated code amendments.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 9, 2026, 11:15 PM