openpress
Pass
Audited by Gen Agent Trust Hub on Aug 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute various shell commands through
npmscripts and a localopen-pressbinary for lifecycle tasks such as building, serving, and exporting artifacts (PDF, image, Word). It also employsripgrep(rg) to search for specific markers within the project source. - [INDIRECT_PROMPT_INJECTION]: The skill processes external data from workspace source files and project-specific metadata, which may contain malicious instructions.
- Ingestion points: MDX/TSX source files located in
press/, as well asmemory/AGENTS.mdandopenpress/settings.json. - Boundary markers: The skill does not define explicit delimiters or instructions for the agent to ignore embedded content within these files.
- Capability inventory: The agent can execute shell commands via
npmand theopen-pressCLI, and possesses write access to workspace files. - Sanitization: No sanitization or validation of the ingested external source content is specified.
Audit Metadata