pp-gravitus
Pass
Audited by Gen Agent Trust Hub on Jul 20, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documentation provides instructions to install the gravitus-pp-cli tool using npx from the NPM registry (@mvanhorn/printing-press-library) or go install from the author's GitHub repository.
- [DATA_EXFILTRATION]: The CLI tool includes a --deliver webhook: feature. This allows the agent to transmit retrieved workout data or authentication tokens to a remote URL, which could be used to exfiltrate information if directed to an attacker-controlled endpoint.
- [PROMPT_INJECTION]: The skill facilitates processing workout data from the external Gravitus API, creating a surface for indirect prompt injection.
- Ingestion points: Fetches data from user profiles, workout logs, and exercise records via the Gravitus API.
- Boundary markers: The instructions do not specify how to distinguish between legitimate data and potential instructions embedded in API responses.
- Capability inventory: The skill has access to the Bash tool, allowing it to execute local commands.
- Sanitization: No sanitization or validation of the remote API content is performed before it is processed by the agent.
Audit Metadata