pp-air-quality
Pass
Audited by Gen Agent Trust Hub on Jun 28, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of the
air-quality-pp-clitool usingnpxfrom the@mvanhorn/printing-press-librarypackage andgo installfrom themvanhorn/printing-press-libraryGitHub repository. These sources are official vendor-controlled locations. - [COMMAND_EXECUTION]: The skill relies on executing the
air-quality-pp-clibinary to perform air quality assessments and historical lookups. This execution is scoped to the tool's intended functionality of retrieving environmental measurements. - [PROMPT_INJECTION]: The skill has a data ingestion surface through the OpenAQ and AirNow APIs. While this creates a potential for indirect prompt injection, the risk is minimal given that the returned data is typically numerical sensor measurements.
- Ingestion points: External air quality data fetched from OpenAQ and AirNow APIs (SKILL.md).
- Boundary markers: None explicitly defined in the skill instructions.
- Capability inventory: Execution of the
air-quality-pp-clibinary for data retrieval (SKILL.md). - Sanitization: Not specified in the instructions; the skill assumes the data returned by the supported APIs is well-formed.
Audit Metadata