pp-policy-intel
Pass
Audited by Gen Agent Trust Hub on Jul 11, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the policy-intel-pp-cli binary from the developer's GitHub repository (github.com/mvanhorn/printing-press-library) using the go install command.
- [EXTERNAL_DOWNLOADS]: The skill uses npx to install the CLI from the developer's NPM package (@mvanhorn/printing-press-library).
- [COMMAND_EXECUTION]: The skill executes the policy-intel-pp-cli tool to search the Federal Register and Regulations.gov APIs.
- [SAFE]: The skill instructs users to set an environment variable (POLICY_INTEL_REGULATIONS_API_KEY) for API access, which is a secure method for managing secrets compared to hardcoding.
- [SAFE]: Evaluation of potential indirect prompt injection surface:
- Ingestion points: Data is retrieved from the Federal Register and Regulations.gov APIs (SKILL.md).
- Boundary markers: The CLI uses a --agent flag to return output in structured JSON format, separating data from instructions.
- Capability inventory: Capability is limited to executing the specific policy-intel-pp-cli binary.
- Sanitization: The tool converts external API responses into structured JSON before returning it to the agent, providing clear data boundaries.
Audit Metadata