pp-techmeme
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of external binaries from the author's repository and the NPM registry to function.
- Fetches the CLI tool using
npx -y @mvanhorn/printing-press-library install techmeme --cli-only. - Fetches the CLI tool and MCP server using
go installfromgithub.com/mvanhorn/printing-press-library. - [DATA_EXFILTRATION]: The CLI tool includes a delivery feature that can be used to send command results to external network endpoints.
- The
--deliver webhook:<url>flag allows routing command output to arbitrary remote URLs provided at runtime. - The
feedbackcommand allows sending local notes to a remote endpoint ifTECHMEME_FEEDBACK_ENDPOINTis configured. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process tech news headlines and metadata from an external source (Techmeme), creating a potential injection surface.
- Ingestion points: Data retrieved via subcommands like
since,river,search,trending, anddigestinSKILL.md. - Boundary markers: None identified; the instructions do not specify using delimiters or warnings to ignore instructions embedded in the news data.
- Capability inventory: The skill uses the
Bashtool to execute thetechmeme-pp-clibinary, which can access local storage and network endpoints. - Sanitization: No explicit sanitization or filtering of the retrieved headlines is described in the skill instructions.
- [COMMAND_EXECUTION]: The skill's primary function is to drive a shell-based binary that interacts with the filesystem and network.
- Commands are executed via the
Bashtool to query a local SQLite store or sync data from the Techmeme API.
Audit Metadata