pp-keenable
Warn
Audited by Gen Agent Trust Hub on Aug 29, 2026
Risk Level: MEDIUMREMOTE_CODE_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONDATA_EXFILTRATIONCOMMAND_EXECUTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill instructs the user/agent to install the
keenable-pp-clitool and MCP server usingnpx -y @mvanhorn/printing-press-libraryandgo install github.com/mvanhorn/printing-press-library/.... This involves downloading and executing code from external repositories. - [DYNAMIC_EXECUTION]: The skill implements an 'Automatic learning' loop where the agent fetches 'playbooks' from a local database via the
recallcommand. These playbooks contain structured lists of shell commands (steps) that the agent is explicitly instructed to execute in order. This creates a mechanism for executing dynamically generated or previously stored command sequences based on natural language triggers. - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from the web via
fetchandweb-searchcommands. It also processes 'notes' and 'playbooks' from its learning store. Malicious content in these sources could potentially influence the agent's behavior or poison the learning loop via theteachorplaybook amendcommands. - Ingestion points:
keenable-pp-cli fetch,keenable-pp-cli web-search, andkeenable-pp-cli recall. - Boundary markers: None explicitly mentioned for separating web content or learned notes from agent instructions.
- Capability inventory: Shell command execution via
keenable-pp-cliandRead Bash. - Sanitization: The skill recommends stripping personal identifiers (PII) from queries before teaching, but does not specify sanitization or validation of the fetched web content or command steps themselves.
- [DATA_EXFILTRATION]: The CLI supports a
--deliver webhook:<url>flag, which allows the agent to POST the output of any command to an arbitrary remote URL. Additionally, afeedbackcommand is included that can send local data to a remote endpoint if configured. - [COMMAND_EXECUTION]: The skill is built around executing the
keenable-pp-clibinary with various arguments and flags to manage web research and the local learning store.
Audit Metadata