pp-booksy
Pass
Audited by Gen Agent Trust Hub on Aug 19, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads and installs the
booksy-pp-cliandbooksy-pp-mcptools from the author's own repositories. - Sources include the NPM package
@mvanhorn/printing-press-library(vianpx) and the GitHub repositorygithub.com/mvanhorn/printing-press-library(viago install). - These resources are owned by the skill's author ('mvanhorn') and represent the intended functionality of the toolset.
- [INDIRECT_PROMPT_INJECTION]: The skill processes external data from the Booksy marketplace, such as business profiles, services, and reviews, which could potentially contain untrusted content.
- Ingestion points: Data enters the agent's context through command outputs from
businesses search,get, andreviews. - Boundary markers: None explicitly defined in the instructions, although the
--agentflag ensures structured JSON output which helps the agent distinguish data from instructions. - Capability inventory: The skill uses the
Read Bashtool to execute thebooksy-pp-clibinary. - Sanitization: The skill provides a
--selectflag to allow the agent to filter specific JSON fields, reducing the amount of processed untrusted data. - [COMMAND_EXECUTION]: The skill relies on executing shell commands via the
booksy-pp-clibinary to interact with the Booksy API. Thebookcommand includes a dry-run safety mechanism by default, requiring an explicit--confirmflag for mutations.
Audit Metadata