pp-nynj-world-cup-concierge
Pass
Audited by Gen Agent Trust Hub on Jul 20, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of the
nynj-world-cup-concierge-pp-clitool from the@mvanhornNPM registry and a GitHub repository under themvanhornorganization. These resources are part of the vendor's official infrastructure.- [COMMAND_EXECUTION]: The skill uses the Bash tool to execute the installed CLI and perform installation tasks. It generates shell commands based on user arguments, specifically for the installation and data extraction processes.- [PROMPT_INJECTION]: The skill processes data from external public web sources, creating a surface for indirect prompt injection. - Ingestion points: The
extractcommand inSKILL.mdfetches content from external NYNJ World Cup Concierge sources. - Boundary markers: The skill does not define specific delimiters or instructions to ignore potential commands embedded in the fetched data.
- Capability inventory: The skill has access to the
BashandReadtools. - Sanitization: The documentation indicates the CLI emits normalized JSON candidates, providing structure but not natural language instruction filtering.
Audit Metadata