pp-masterpark
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the masterpark-pp-cli tool using npx from the @mvanhorn NPM scope or via go install from the developer's GitHub repository. These are verified vendor resources.
- [COMMAND_EXECUTION]: The skill invokes the masterpark-pp-cli binary to interact with parking services. It also supports executing local commands like op read to securely fetch credentials from password managers rather than storing them in plain text.
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from the MasterPark API, including parking quotes and reservation history. * Ingestion points: MasterPark netParkV2 WordPress/AJAX endpoints (SKILL.md). * Boundary markers: None explicitly defined in the skill instructions. * Capability inventory: Subprocess execution via Bash and network connectivity (SKILL.md). * Sanitization: Relies on the binary's internal handling of API responses.
Audit Metadata