pp-plane
Pass
Audited by Gen Agent Trust Hub on Aug 19, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [UNVERIFIABLE_DEPENDENCIES]: The skill fetches the 'plane-pp-cli' binary from the author's GitHub repository and supports installation via the '@mvanhorn/printing-press-library' NPM package and Go modules. Documented neutrally as these are vendor-owned resources.
- [PRIVILEGE_ESCALATION]: Installation steps include using 'sudo mv' to place the binary in the '/usr/local/bin' directory, which requires root permissions.
- [DATA_EXFILTRATION]: The CLI tool provides a '--deliver webhook:' flag, enabling the redirection of command output to any external URL. Additionally, a feedback mechanism is provided that can send data to a user-specified 'PLANE_FEEDBACK_ENDPOINT'.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from the Plane API (e.g., issue descriptions and project titles). * Ingestion points: Plane REST API data processed in 'SKILL.md'. * Boundary markers: The tool uses structured JSON output via the '--agent' flag. * Capability inventory: Includes shell command execution and output delivery to files or webhooks. * Sanitization: No specific sanitization of API-provided strings is documented.
Audit Metadata