printing-press-publish
Pass
Audited by Gen Agent Trust Hub on May 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the Bash tool to automate a multi-step publishing workflow. This involves shell operations for directory management, file cleanup, and the orchestration of command-line utilities like
jqfor JSON processing,gitfor version control, andghfor GitHub interactions. - [EXTERNAL_DOWNLOADS]: The skill downloads the target repository from
github.com/mvanhorn/printing-press-library. It also recommends the installation of theprinting-pressbinary from the author's official repository atgithub.com/mvanhorn/cli-printing-press. - [REMOTE_CODE_EXECUTION]: The skill executes specific Go tools within the cloned repository (
./tools/generate-skills/main.go) to synchronize project metadata. It also dynamically runs thegovulncheckutility fromgolang.orgto ensure the published code does not contain known vulnerabilities. - [DATA_EXFILTRATION]: The skill's intended purpose is the public distribution of code to GitHub. To mitigate the risk of accidental data exposure, the skill implements a mandatory multi-tier security scan that checks for hardcoded credentials (using tools like
gitleaksortrufflehog) and scrubs PII from manuscript files and README documentation prior to the commit and push operations.
Audit Metadata