pp-agent-capture
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the
agent-capture-pp-clibinary usingnpx -y @mvanhorn/printing-press-libraryandgo install github.com/mvanhorn/printing-press-library/.... These resources are hosted on official repositories associated with the author. - [DATA_EXFILTRATION]: The skill provides comprehensive functionality for screen capture, video recording of windows, and OCR (Optical Character Recognition). This creates a significant surface for exposing sensitive data displayed on the user's desktop to the agent.
- [INDIRECT_PROMPT_INJECTION]:
- Ingestion points: Commands like
ocr,screenshot, andwatchingest unstructured data directly from the graphical user interface. - Boundary markers: There are no instructions or delimiters provided to help the agent distinguish between intended UI text and potentially malicious hidden instructions in the captured content.
- Capability inventory: The skill allows for command execution, file system access for saving media, and screen recording.
- Sanitization: The skill does not mention any sanitization or filtering of text extracted via OCR before it is processed by the agent.
- [DYNAMIC_EXECUTION]: The
vhscommand executes terminal automation scripts (tape files), and theremotioncommand renders video from React compositions. Both commands involve the execution of script-based templates to generate output. - [COMMAND_EXECUTION]: The skill instructs the agent to invoke a local CLI binary with various arguments. The inclusion of an
--agentflag enables non-interactive mode (--no-input,--yes), which can lead to actions being performed without explicit user confirmation.
Audit Metadata