pp-game-goat
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill provides instructions to download and install a binary CLI tool from the vendor's (@mvanhorn) NPM and GitHub repositories. Evidence: 'npx -y @mvanhorn/printing-press-library install game-goat' and 'go install github.com/mvanhorn/printing-press-library/...'.
- [DATA_EXFILTRATION]: The CLI tool includes a '--deliver webhook:' flag that enables the agent to send command output directly to arbitrary external HTTP endpoints. Evidence: The documentation describes POSTing output body to a provided URL.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external sources like RAWG, Steam, and IsThereAnyDeal, which could contain malicious instructions. Evidence Ingestion points: API search results from game databases and storefronts. Boundary markers: None identified. Capability inventory: Shell command execution, file writing via sinks, and network delivery via webhooks. Sanitization: Instructions mention manual PII stripping for taught queries, but no automated sanitization is described for API data.
- [COMMAND_EXECUTION]: The core functionality relies on executing a local binary 'game-goat-pp-cli' via shell commands, requiring process execution permissions.
Audit Metadata