skills/dl-alexandre/skills/mpr-cli/Gen Agent Trust Hub

mpr-cli

Pass

Audited by Gen Agent Trust Hub on Sep 20, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes the mpr CLI tool to query market reports, prices, and historical data from the USDA.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes external data from the USDA MyMarketNews API, which is a potential vector for instructions to be embedded in data.
  • Ingestion points: Output from commands such as mpr reports get, mpr prices, and mpr trends is read by the agent (found in SKILL.md).
  • Boundary markers: No delimiters or safety instructions are defined to separate external data from agent instructions.
  • Capability inventory: The skill provides shell command execution capabilities via the mpr tool.
  • Sanitization: No validation or filtering is performed on the market data content before it enters the agent's context.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 20, 2026, 03:07 AM