pp-context-dev
Pass
Audited by Gen Agent Trust Hub on Aug 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to install a binary using
npx -y @mvanhorn/printing-press-libraryandgo install github.com/mvanhorn/printing-press-library/.... These resources belong to the skill's vendor (mvanhorn).- [DATA_EXFILTRATION]: The CLI includes a--deliver webhook:<url>feature that POSTs command results to a user-specified URL. It also features a feedback mechanism that can be configured to automatically send local logs to a remote endpoint viaCONTEXT_DEV_FEEDBACK_AUTO_SEND.- [INDIRECT_PROMPT_INJECTION]: - Ingestion points: The skill provides functions to scrape (
scrape), crawl (crawl), and query (brand-qa) external, untrusted websites. - Boundary markers: Absent. The instructions do not specify any delimiters or warnings to treat the scraped content as untrusted data.
- Capability inventory: The agent can execute commands, write files locally via the
--deliver file:<path>flag, and send data to network endpoints via webhooks. - Sanitization: None. Data from external sites is returned as Markdown or JSON and processed directly by the agent without escaping or filtering.
Audit Metadata