pp-delta-trip
Pass
Audited by Gen Agent Trust Hub on Jul 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to install the
delta-trip-pp-clitool usingnpxfrom the@mvanhorn/printing-press-librarypackage on NPM andgo installfrom themvanhornGitHub repository. These resources are hosted on well-known platforms and originate from the vendor's own accounts. - [COMMAND_EXECUTION]: The skill utilizes the
Bashtool to execute various subcommands of thedelta-trip-pp-clibinary, such asbaggage,flights, andseats, to retrieve trip-related information. - [DATA_EXFILTRATION]: The CLI tool includes a
--deliverflag that supports routing output to external webhooks (webhook:<url>). This is a documented feature of the vendor's tool allowing for remote data delivery. - [DATA_EXPOSURE]: The tool stores feedback entries and user profiles locally in the home directory (
~/.delta-trip-pp-cli/).
Audit Metadata