ideal-postcodes-cli
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data (such as address strings, email lists, and phone numbers) from files or standard input, which could contain malicious instructions designed to influence the agent's behavior.
- Ingestion points: Address strings, email lists, and phone numbers are ingested via
idpc cleanse,idpc email, andidpc phonecommands using the--fileor--stdinflags. Configuration updates are ingested viaidpc keys update --json-body. - Boundary markers: The instructions do not define specific delimiters or guidelines for the agent to ignore instructions embedded within the processed data.
- Capability inventory: The skill executes
idpcCLI subcommands to perform network API calls to vendor endpoints and file writing operations (CSV/JSON output). - Sanitization: No sanitization or validation steps are defined in the instructions for the external content before it is passed to the CLI tool.
- [COMMAND_EXECUTION]: The skill instructions involve executing the
idpccommand-line interface to interact with the Ideal Postcodes API and manage account configurations. - [EXTERNAL_DOWNLOADS]: The skill requires the installation of the
@ideal-postcodes/clipackage from the NPM registry. This is a resource provided by the skill's author for the intended functionality of the skill.
Audit Metadata