Skip to main content

pp-archive-is

Enables users to archive URLs, bypass paywalls, and retrieve cached webpage versions using archive.today and Wayback Machine.

Install this skill

or
78/100

Security score

The pp-archive-is skill was audited on Jun 6, 2026 and we found 10 security issues across 3 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 254

Webhook reference - potential data exfiltration

SourceSKILL.md
254Route command output to a sink other than stdout. Useful when an agent needs to hand a result to a file, a webhook, or another process without plumbing.
low line 258

Webhook reference - potential data exfiltration

SourceSKILL.md
258archive-is-pp-cli <command> --deliver webhook:https://hooks.example/in
medium line 261

Webhook reference - potential data exfiltration

SourceSKILL.md
261File sinks write atomically (tmp + rename). Webhook sinks POST `application/json` (or `application/x-ndjson` when `--compact` is set). Unknown schemes produce a structured refusal listing the supporte
medium line 273

Access to hidden dotfiles in home directory

SourceSKILL.md
273Entries append to `~/.archive-is-pp-cli/feedback.jsonl` as JSON lines. When `ARCHIVE_IS_FEEDBACK_ENDPOINT` is set and either `--send` is passed or `ARCHIVE_IS_FEEDBACK_AUTO_SEND=true`, the entry is al
low line 128

External URL reference

SourceSKILL.md
128archive-is-pp-cli read "https://www.wsj.com/articles/..." --agent
low line 130

External URL reference

SourceSKILL.md
130archive-is-pp-cli get "https://www.wsj.com/articles/..." --format text --agent
low line 138

External URL reference

SourceSKILL.md
138archive-is-pp-cli save "https://example.com/important-page" --agent
low line 139

External URL reference

SourceSKILL.md
139archive-is-pp-cli history "https://example.com/important-page" --agent # verify
low line 157

External URL reference

SourceSKILL.md
157archive-is-pp-cli read "https://ft.com/content/xyz" --backend wayback,archive-is --agent
low line 258

External URL reference

SourceSKILL.md
258archive-is-pp-cli <command> --deliver webhook:https://hooks.example/in
Scanned on Jun 6, 2026
View Security Dashboard
Installation guide →