printing-press-import
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches project metadata and clones repository subtrees from the author's repository (
github.com/mvanhorn/printing-press-library). This activity is a core part of the skill's workflow and uses the author's own infrastructure. - [COMMAND_EXECUTION]: The skill uses
Bashto run maintenance scripts,perlto perform automated edits on source files, and the Go toolchain (go build) to verify the integrity of imported projects. - [INDIRECT_PROMPT_INJECTION]: The skill processes and executes code from a remote source, establishing a potential attack surface.
- Ingestion points: Project source and metadata are retrieved via
ghandgitfrom themvanhorn/printing-press-libraryrepository. - Boundary markers: The skill does not employ specific delimiters or instruction-blocking warnings for the imported content.
- Capability inventory: The skill has the capability to write to the file system and execute build commands and binaries.
- Sanitization: No sanitization is performed on the imported Go source code before build or execution commands are issued.
Audit Metadata