pp-digg

Pass

Audited by Gen Agent Trust Hub on Sep 17, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of the digg-pp-cli tool using npx for the @mvanhorn/printing-press-library package and go install for the github.com/mvanhorn/printing-press-library repository. Both resources are vendor-owned by the author.
  • [COMMAND_EXECUTION]: The skill operates by executing the digg-pp-cli binary with various subcommands and arguments derived from user queries.
  • [DATA_EXFILTRATION]: The CLI tool includes a --deliver flag that supports routing output to local files (file:<path>) or external webhooks (webhook:<url>).
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from Digg news and GitHub activity feeds and interpolates user input into command parameters.
  • Ingestion points: Data is retrieved from Digg APIs and GitHub activity feeds.
  • Boundary markers: None explicitly defined in the instruction set for external data.
  • Capability inventory: The tool performs network operations to fetch news data and can write to the filesystem or network via the delivery flag.
  • Sanitization: The instructions do not describe specific sanitization or filtering logic for the retrieved external content.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 17, 2026, 10:39 PM