pp-hotelist
Pass
Audited by Gen Agent Trust Hub on Jul 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSDATA_EXFILTRATIONPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches the hotelist-pp-cli binary from the vendor's GitHub and NPM repositories. * Evidence: npx -y @mvanhorn/printing-press-library install hotelist --cli-only. * Evidence: go install github.com/mvanhorn/printing-press-library/library/travel/hotelist/cmd/hotelist-pp-cli@latest.
- [DATA_EXFILTRATION]: Provides a built-in mechanism to transmit command results to arbitrary external webhooks. * Evidence: --deliver webhook: sink in the Output Delivery section.
- [DATA_EXFILTRATION]: Contains a feedback feature capable of automated data transmission to a remote endpoint. * Evidence: HOTELIST_FEEDBACK_AUTO_SEND=true and HOTELIST_FEEDBACK_ENDPOINT environment variables.
- [PROMPT_INJECTION]: Processes untrusted hotel review data and listing details, which could contain adversarial instructions (Indirect Prompt Injection). * Ingestion points: Hotel reviews, room photos, and detail-modal HTML (SKILL.md). * Boundary markers: Absent. * Capability inventory: Subprocess execution via hotelist-pp-cli, file writes, and network operations (webhook). * Sanitization: Not specified.
- [COMMAND_EXECUTION]: Executes the hotelist-pp-cli binary to perform hotel data queries and comparisons. * Evidence: Multiple examples using hotelist-pp-cli .
Audit Metadata