pp-judge-me
Pass
Audited by Gen Agent Trust Hub on Jul 20, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill directs the agent to install the
judge-me-pp-clitool usingnpxfrom the@mvanhorn/printing-press-libraryNPM package andgo installfrom thegithub.com/mvanhorn/printing-press-libraryrepository. These resources are provided by the tool's vendor. - [COMMAND_EXECUTION]: The skill's primary functionality is achieved by executing shell commands via the
judge-me-pp-clibinary to interact with the Judge.me REST API and local SQLite storage. - [DATA_EXFILTRATION]: The CLI tool includes a
--deliver webhook:<url>feature that allows routing command output to a user-specified URL via HTTP POST. While a standard feature for automation, it represents a potential data egress point. - [PROMPT_INJECTION]: The skill processes untrusted review data from external sources. The documentation explicitly warns that raw review information is not sanitized, creating an attack surface for indirect prompt injection or cross-site scripting (XSS) if the output is rendered without further processing.
- Ingestion points:
reviews index,reviews get, andreviews updatecommands inSKILL.mdfetch content from the Judge.me API. - Boundary markers: No specific delimiters or "ignore" instructions are implemented for the interpolation of fetched review content into the agent's context.
- Capability inventory: The agent has access to shell execution (
bash) and network operations through the CLI tool. - Sanitization: The skill contains an explicit warning that raw review data is not sanitized.
Audit Metadata