pp-daraz

Pass

Audited by Gen Agent Trust Hub on Oct 19, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of the daraz-pp-cli tool using npx from the @mvanhorn/printing-press-library NPM package or via go install from the author's GitHub repository at github.com/mvanhorn/printing-press-library.
  • [DATA_EXFILTRATION]: The CLI tool supports a --deliver webhook:<url> flag for routing output to external URLs and a feedback command that can transmit local logs to a remote endpoint if configured by the user.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze untrusted data from Daraz.pk, such as product listings and user reviews. Data enters the agent's context through commands like products and reviews. No explicit sanitization or delimiters are specified in the instructions, which is a common trait for marketplace data processing tools.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 19, 2026, 06:13 PM