Skills
Navigate
skills/mvanhorn/printing-press-library/pp-art-goat/Gen Agent Trust Hub

pp-art-goat

Warn

Audited by Gen Agent Trust Hub on Jul 20, 2026

Risk Level: MEDIUMDATA_EXFILTRATIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [DATA_EXFILTRATION]: The skill includes a --deliver webhook:<url> flag that allows the output of any command—including personal journal entries and search results—to be sent to an arbitrary remote URL.
  • [DATA_EXFILTRATION]: The feedback command can be configured to automatically transmit locally stored notes to a remote server using the ART_GOAT_FEEDBACK_ENDPOINT environment variable.
  • [EXTERNAL_DOWNLOADS]: The skill instructs the user/agent to install a CLI tool from external sources: the npm package @mvanhorn/printing-press-library and the GitHub repository github.com/mvanhorn/printing-press-library.
  • [COMMAND_EXECUTION]: The skill's operation relies on executing a local binary art-goat-pp-cli via the Bash tool to perform file system operations and network requests.
  • [COMMAND_EXECUTION]: The which subcommand interprets natural-language strings to resolve and execute specific CLI features, which represents a surface for unexpected command execution paths.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Jul 20, 2026, 10:59 PM
Security Audit — agent-trust-hub — pp-art-goat