pp-ht-ml
Pass
Audited by Gen Agent Trust Hub on Aug 26, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to download and install its own CLI and MCP server tools via official package registries and the vendor's GitHub repository. These include
npx -y @mvanhorn/printing-press-library install ht-ml --cli-onlyandgo install github.com/mvanhorn/printing-press-library/.... - [COMMAND_EXECUTION]: The skill's primary purpose is to execute commands using the
ht-ml-pp-clibinary. It uses theBashtool to run these commands for tasks such as listing sites, publishing HTML, and managing local site keys. - [DATA_EXFILTRATION]: While the skill manages 'update_keys' and site content, these are stored in a local SQLite database or a user-created 'vault' file (
ht-ml-keys.vault). The skill also includes a--deliver webhook:<url>feature which can send command output to an external URL, but this is a documented administrative feature of the tool itself for routing output.
Audit Metadata