pp-framer
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDATA_EXFILTRATION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the
framer-pp-cliandframer-pp-mcptools from the vendor's GitHub repository usinggo installandnpx. - [COMMAND_EXECUTION]: The skill invokes the
framer-pp-clibinary to perform project operations, which internally uses a Node.js bridge (bridge/framer-bridge.mjs) to communicate with the Framer Server API. - [INDIRECT_PROMPT_INJECTION]: The skill has attack surfaces where untrusted external data is ingested and processed.
- Ingestion points: The
cms-synccommand reads from local CSV/JSON files, andmigrate-scraperetrieves content from external URLs. - Boundary markers: No delimiters or explicit instructions to ignore embedded content are provided.
- Capability inventory: The tool has broad project modification capabilities, including updating CMS items, changing canvas nodes, and performing network operations via the API bridge.
- Sanitization: No sanitization or validation of the ingested external content is described.
- [DATA_EXFILTRATION]: The skill provides an output delivery mechanism via the
--deliver webhook:<url>flag, which allows routing project data and command results to arbitrary external URLs.
Audit Metadata