pp-prediction-goat
Pass
Audited by Gen Agent Trust Hub on Jul 19, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to install the
prediction-goat-pp-clibinary usingnpxfrom the@mvanhorn/printing-pressNPM package andgo installfrom thegithub.com/mvanhorn/printing-press-libraryrepository. These resources are hosted on the vendor's infrastructure. - [COMMAND_EXECUTION]: The skill's primary functionality is achieved by executing the
prediction-goat-pp-clibinary through the shell, using theBashtool to perform data retrieval and management tasks. - [DATA_EXFILTRATION]: The CLI tool supports a
--deliver webhook:<url>flag, which enables the output of commands to be transmitted to an arbitrary external URL. Additionally, afeedbackcommand is included that can send user-provided data to a remote endpoint if a specific environment variable is configured. - [PROMPT_INJECTION]: The skill defines an 'Automatic learning' protocol where the agent is explicitly instructed to execute sequences of commands ('playbooks') and follow 'notes' returned by the
recallcommand. This design creates an indirect prompt injection surface where the tool's data output can direct the agent's future actions and influence its decision-making process. - Ingestion points: Data returned by the
recallcommand in theplaybookandnotesfields. - Boundary markers: None identified; the instructions mandate following the tool's output verbatim.
- Capability inventory: The skill has access to shell execution via the
Bashtool. - Sanitization: No explicit sanitization or validation of the retrieved playbooks is described.
Audit Metadata