pp-air-quality
Pass
Audited by Gen Agent Trust Hub on Aug 20, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to install the
air-quality-pp-clibinary usingnpxfrom the@mvanhorn/printing-press-librarypackage andgo installfromgithub.com/mvanhorn/printing-press-library. These resources originate from the vendor's own infrastructure and are required for the skill's primary functionality. - [COMMAND_EXECUTION]: The skill utilizes the
Bashtool to execute theair-quality-pp-clibinary. This execution is scoped to fetching air quality metrics and sensor history as described in the recipes. - [INDIRECT_PROMPT_INJECTION]: The skill ingest data from external Air Quality APIs which could potentially contain malicious instructions.
- Ingestion points: Data is fetched via the
current,nearest,location,history, andairnowcommands of theair-quality-pp-clitool. - Boundary markers: None identified in the skill instructions.
- Capability inventory: The agent has access to the
Bashtool to run the CLI. - Sanitization: There are no explicit sanitization or filtering steps defined in the instructions for the external API output.
Audit Metadata