pp-judge-me
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to download and install the
judge-me-pp-clibinary usingnpxfrom the@mvanhorn/printing-press-librarypackage and viago installfrom themvanhorn/printing-press-libraryGitHub repository. These sources are linked to the tool's development infrastructure. - [COMMAND_EXECUTION]: The skill is designed to execute the
judge-me-pp-clibinary with various flags and subcommands to manage store reviews, settings, and webhooks. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data in the form of product reviews retrieved from the Judge.me API. The instructions explicitly warn that raw review information is not sanitized, which could allow malicious instructions embedded in reviews to influence the agent's behavior.
- Ingestion points: Data retrieved via
judge-me-pp-cli reviews indexandjudge-me-pp-cli reviews getas documented inSKILL.md. - Boundary markers: No specific delimiters or instructions to ignore embedded content are provided in the skill instructions.
- Capability inventory: The CLI tool possesses capabilities for file system writes (
--deliver file:<path>), network requests (--deliver webhook:<url>), and general CLI command execution as listed inSKILL.md. - Sanitization: The skill specifically notes that review content is not sanitized and may contain XSS or other risks.
Audit Metadata