pp-air-quality

Pass

Audited by Gen Agent Trust Hub on Aug 20, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill provides instructions to install the air-quality-pp-cli binary using npx from the @mvanhorn/printing-press-library package and go install from github.com/mvanhorn/printing-press-library. These resources originate from the vendor's own infrastructure and are required for the skill's primary functionality.
  • [COMMAND_EXECUTION]: The skill utilizes the Bash tool to execute the air-quality-pp-cli binary. This execution is scoped to fetching air quality metrics and sensor history as described in the recipes.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingest data from external Air Quality APIs which could potentially contain malicious instructions.
  • Ingestion points: Data is fetched via the current, nearest, location, history, and airnow commands of the air-quality-pp-cli tool.
  • Boundary markers: None identified in the skill instructions.
  • Capability inventory: The agent has access to the Bash tool to run the CLI.
  • Sanitization: There are no explicit sanitization or filtering steps defined in the instructions for the external API output.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 20, 2026, 08:23 AM