pp-ars-sicilia
Warn
Audited by Gen Agent Trust Hub on Jul 28, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill is designed to execute a specific binary (
ars-sicilia-pp-cli) using shell commands through theRead Bashtool. While scoped to the tool's functionality, this allows for arbitrary argument passing. - [EXTERNAL_DOWNLOADS]: The skill instructions direct the user or agent to install external software using
npx -y @mvanhorn/printing-press-libraryandgo install github.com/mvanhorn/printing-press-library/.... These resources are hosted under the vendor's official namespace. - [DATA_EXFILTRATION]: The CLI includes a
--deliver webhook:<url>feature that enables the tool to POST its output (which may contain parliamentary records or local processing results) to an arbitrary external network endpoint. This capability can be used to exfiltrate data processed by the agent. - [PROMPT_INJECTION]: The skill defines an
--agentmode that automatically includes a--yesflag. This configuration instructs the agent to bypass standard interactive confirmation prompts, potentially leading to unintended command execution.
Audit Metadata