printing-press-score
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes the
cli-printing-pressbinary via theBashtool to perform its core functions of scoring and comparing CLI applications. These commands are executed with directory paths resolved from user input or local state files. - [EXTERNAL_DOWNLOADS]: The documentation provides instructions to install the
cli-printing-pressutility from the vendor's official GitHub repository (github.com/mvanhorn/cli-printing-press) using the Go toolchain (go install). This is a documented prerequisite for the skill's functionality. - [INDIRECT_PROMPT_INJECTION]: The skill handles user-provided identifiers (names or paths) and parses external JSON files (
state.json,spec.json), which constitutes an indirect instruction surface. - Ingestion points: User input tokens provided after the
/printing-press-scorecommand;state.jsonandspec.jsonfiles found in the runstate or CLI directories. - Boundary markers: No specific delimiters or "ignore instructions" warnings are defined for the interpolation of these values.
- Capability inventory: The skill possesses the capability to execute shell commands and read/write files within the printing-press workspace via the
Bash,Read,Glob, andGreptools. - Sanitization: The skill logic strips specific "noise words" from user input and verifies that resolved paths correspond to existing directories before they are passed to the execution tool.
Audit Metadata