pp-fedex
Pass
Audited by Gen Agent Trust Hub on May 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of the
fedex-pp-cliandfedex-pp-mcpbinaries vianpxandgo install. These tools are hosted in themvanhornvendor's repositories on NPM and GitHub. - [COMMAND_EXECUTION]: The skill executes the
fedex-pp-clibinary to perform shipping operations. This includes ansqlsubcommand that enables direct SQL queries on the local SQLite shipment database, which is a powerful administrative capability. - [DATA_EXFILTRATION]: The CLI supports routing command results and tracking updates to remote webhooks through the
--deliver webhook:<url>andtrack watch --webhook <url>features. While intended for integration, this creates a channel for data to leave the local environment. - [PROMPT_INJECTION]: The skill presents an attack surface for indirect prompt injection by ingesting external data from CSV files in
ship bulkcommands and processing natural language via thewhichcommand. Ingestion points:orders.csv. Capabilities: Network (webhooks) and filesystem access. Boundary markers and sanitization are not explicitly defined in the instructions.
Audit Metadata