pp-daraz
Pass
Audited by Gen Agent Trust Hub on Oct 19, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of the
daraz-pp-clitool usingnpxfrom the@mvanhorn/printing-press-libraryNPM package or viago installfrom the author's GitHub repository atgithub.com/mvanhorn/printing-press-library. - [DATA_EXFILTRATION]: The CLI tool supports a
--deliver webhook:<url>flag for routing output to external URLs and afeedbackcommand that can transmit local logs to a remote endpoint if configured by the user. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze untrusted data from Daraz.pk, such as product listings and user reviews. Data enters the agent's context through commands like
productsandreviews. No explicit sanitization or delimiters are specified in the instructions, which is a common trait for marketplace data processing tools.
Audit Metadata