pp-techmeme

Pass

Audited by Gen Agent Trust Hub on Sep 16, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill requires the installation of external binaries from the author's repository and the NPM registry to function.
  • Fetches the CLI tool using npx -y @mvanhorn/printing-press-library install techmeme --cli-only.
  • Fetches the CLI tool and MCP server using go install from github.com/mvanhorn/printing-press-library.
  • [DATA_EXFILTRATION]: The CLI tool includes a delivery feature that can be used to send command results to external network endpoints.
  • The --deliver webhook:<url> flag allows routing command output to arbitrary remote URLs provided at runtime.
  • The feedback command allows sending local notes to a remote endpoint if TECHMEME_FEEDBACK_ENDPOINT is configured.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process tech news headlines and metadata from an external source (Techmeme), creating a potential injection surface.
  • Ingestion points: Data retrieved via subcommands like since, river, search, trending, and digest in SKILL.md.
  • Boundary markers: None identified; the instructions do not specify using delimiters or warnings to ignore instructions embedded in the news data.
  • Capability inventory: The skill uses the Bash tool to execute the techmeme-pp-cli binary, which can access local storage and network endpoints.
  • Sanitization: No explicit sanitization or filtering of the retrieved headlines is described in the skill instructions.
  • [COMMAND_EXECUTION]: The skill's primary function is to drive a shell-based binary that interacts with the filesystem and network.
  • Commands are executed via the Bash tool to query a local SQLite store or sync data from the Techmeme API.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 16, 2026, 08:10 AM