pp-intervals-icu
Pass
Audited by Gen Agent Trust Hub on Aug 21, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the installation of the
intervals-icu-pp-clibinary usinggo installfromgithub.com/mvanhorn/printing-press-libraryand vianpxfrom the@mvanhorn/printing-press-librarypackage on NPM. These resources belong to the skill's author and are used to provide the primary functionality. - [COMMAND_EXECUTION]: The skill wraps shell commands by passing
$ARGUMENTSdirectly to theintervals-icu-pp-clibinary. It uses theBashtool to execute these commands. - [DATA_EXFILTRATION]: The wrapped CLI includes an output delivery feature (
--deliver webhook:<url>) that allows the agent to POST command results to an external URL. While a documented feature of the tool, it represents a mechanism for data exfiltration if the agent is directed to use it maliciously. - [INDIRECT_PROMPT_INJECTION]: The skill provides a surface for indirect prompt injection by processing external data from the intervals.icu REST API.
- Ingestion points: Training data including activities, wellness history, and calendar events are pulled into the local environment via the
syncandactivity getcommands (SKILL.md). - Boundary markers: None present; the skill does not explicitly instruct the agent to ignore instructions embedded within the fitness data.
- Capability inventory: The skill can execute shell commands (
Bash), write to local configuration files (~/.config/intervals-icu-pp-cli/config.toml), and perform network operations (API calls and webhooks). - Sanitization: No sanitization or filtering of the external API content is mentioned in the instructions.
Audit Metadata