printing-press-amend
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
- [DATA_EXFILTRATION]: The skill generates and submits pull requests to the
mvanhorn/printing-press-libraryGitHub repository. These PRs include code patches, plan documentation, and issue reports derived from the developer's local session history. To address privacy concerns, a mandatory Phase 5 PII scrub is executed to redact credentials, entities, and unauthorized capitalized phrases before any data leaves the local environment. - [INDIRECT_PROMPT_INJECTION]: The skill represents a surface for indirect prompt injection because it ingests and parses Claude Code session transcripts from
~/.claude/projects/. These transcripts contain conversational history that may include untrusted or adversarial instructions. - Ingestion points: Session transcript JSONL files located in
~/.claude/projects/, accessed during Phase 1a. - Boundary markers: The skill requires the user to explicitly confirm the resolved transcript path via
AskUserQuestionand presents a tiered finding list for approval at a scope-confirmation checkpoint before any modifications occur. - Capability inventory: The skill leverages
git,gh,go build, and theBashtool to modify source code and interact with remote repositories. - Sanitization: Implements a multi-layered PII scrub (Phase 5) targeting credentials and project-specific entities to sanitize outgoing artifacts.
- [REMOTE_CODE_EXECUTION]: The setup contract in
SKILL.mdinstructs the user to install or update the vendor's CLI binary usinggo install github.com/mvanhorn/cli-printing-press/v4/cmd/cli-printing-press@latestif a current version is not detected. - [EXTERNAL_DOWNLOADS]: Fetches version support information from the vendor's public GitHub repository:
https://raw.githubusercontent.com/mvanhorn/cli-printing-press/main/supported-versions.txt. - [COMMAND_EXECUTION]: Orchestrates various developer tools including
git(for managing the managed clone),gh(for GitHub API interactions and PR creation),go(for build and testing), and text processing utilities likeawk,sed, andjqfor data normalization. - [DYNAMIC_EXECUTION]: During the autonomous Phase 4, the skill executes
go build,go vet, andgovulncheckvia apublish validatecommand to ensure the stability and security of the generated code amendments.
Audit Metadata