pp-ikyu
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill directs the user or agent to install the
ikyu-pp-clitool. The installation instructions utilizenpxto fetch the@mvanhorn/printing-press-librarypackage from the NPM registry andgo installto fetch source code from the author's GitHub repository (github.com/mvanhorn/printing-press-library). These actions are standard setup procedures for dependencies managed by the skill's author. - [INDIRECT_PROMPT_INJECTION]: The skill processes accommodation metadata, room descriptions, and plan conditions fetched from the external Ikyu website via the CLI tool.
- Ingestion points: Data enters the context through the
stay search,stay property,stay rooms, andstay offercommands as documented inSKILL.md. - Boundary markers: None identified in the prompt instructions to delineate external content.
- Capability inventory: The skill uses the
ikyu-pp-clibinary for data retrieval; it does not perform generic file-system writes or arbitrary network requests based on the ingested data. - Sanitization: Not explicitly mentioned; however, the risk is low as the ingested data consists of structured accommodation information.
Audit Metadata