pp-digg
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of the
digg-pp-clitool usingnpxfor the@mvanhorn/printing-press-librarypackage andgo installfor thegithub.com/mvanhorn/printing-press-libraryrepository. Both resources are vendor-owned by the author. - [COMMAND_EXECUTION]: The skill operates by executing the
digg-pp-clibinary with various subcommands and arguments derived from user queries. - [DATA_EXFILTRATION]: The CLI tool includes a
--deliverflag that supports routing output to local files (file:<path>) or external webhooks (webhook:<url>). - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from Digg news and GitHub activity feeds and interpolates user input into command parameters.
- Ingestion points: Data is retrieved from Digg APIs and GitHub activity feeds.
- Boundary markers: None explicitly defined in the instruction set for external data.
- Capability inventory: The tool performs network operations to fetch news data and can write to the filesystem or network via the delivery flag.
- Sanitization: The instructions do not describe specific sanitization or filtering logic for the retrieved external content.
Audit Metadata