mpr-cli
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes the
mprCLI tool to query market reports, prices, and historical data from the USDA. - [INDIRECT_PROMPT_INJECTION]: The skill processes external data from the USDA MyMarketNews API, which is a potential vector for instructions to be embedded in data.
- Ingestion points: Output from commands such as
mpr reports get,mpr prices, andmpr trendsis read by the agent (found in SKILL.md). - Boundary markers: No delimiters or safety instructions are defined to separate external data from agent instructions.
- Capability inventory: The skill provides shell command execution capabilities via the
mprtool. - Sanitization: No validation or filtering is performed on the market data content before it enters the agent's context.
Audit Metadata