pp-american-reindustrialization
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches and installs the american-reindustrialization CLI tool via npx from the @mvanhorn/printing-press-library scope on NPM, which matches the skill's author context.- [REMOTE_CODE_EXECUTION]: Provides a secondary installation path using go install to download and compile the CLI source code from the author's GitHub repository at github.com/mvanhorn/printing-press-library.- [COMMAND_EXECUTION]: The skill's primary function is to execute the american-reindustrialization-pp-cli binary. The CLI includes a --deliver flag that allows the agent to route command output to local files (file:) or remote endpoints (webhook:), and a feedback command that can send data to a configured endpoint.- [INDIRECT_PROMPT_INJECTION]: The skill processes external data from a directory of companies and job listings, representing an ingestion surface for untrusted content.
- Ingestion points: Data retrieved from the American Reindustrialization directory and jobs board via the CLI tool.
- Boundary markers: No specific delimiters or safety warnings for embedded content are defined in the skill instructions.
- Capability inventory: The skill utilizes a CLI capable of file system writes (--deliver file:) and network requests (--deliver webhook:, feedback).
- Sanitization: The instructions do not specify any sanitization or filtering of the ingested external content.
Audit Metadata