pp-docker-hub
Pass
Audited by Gen Agent Trust Hub on May 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to install the
docker-hub-pp-clianddocker-hub-pp-mcptools usinggo installfromgithub.com/mvanhorn/printing-press-libraryandnpxfrom the@mvanhorn/printing-presspackage on npm. These resources are maintained by the identified vendor. - [COMMAND_EXECUTION]: The skill operates by executing the
docker-hub-pp-clibinary with various arguments. It also includes an installation step that executesnpxorgo installin the shell. - [DATA_EXFILTRATION]: The CLI tool features a
--deliver webhook:<url>flag. This capability allows the agent to send the JSON-formatted output of any command to an arbitrary external URL via an HTTP POST request. While a documented feature of the Printing Press library for data routing, it constitutes a potential vector for data exfiltration if directed to untrusted endpoints. - [COMMAND_EXECUTION]: The skill includes a
docker-hub-pp-cli whichcommand that processes natural language queries to resolve CLI capabilities, which involves internal command mapping based on user input.
Audit Metadata