pp-open-library

Pass

Audited by Gen Agent Trust Hub on Aug 21, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill provides instructions to install the open-library-pp-cli tool using npx from the @mvanhorn registry and go install from the mvanhorn GitHub repository. These resources are hosted on the vendor's official distribution channels.
  • [COMMAND_EXECUTION]: The skill relies on the Bash tool to execute the open-library-pp-cli binary for retrieving book, author, and edition metadata.
  • [PROMPT_INJECTION]: The skill retrieves and processes metadata from the Open Library API, creating a vector for indirect prompt injection.
  • Ingestion points: Data returned by the open-library-pp-cli tool from Open Library (e.g., search results, author works, work metadata) as seen in the recipes in SKILL.md.
  • Boundary markers: The skill does not define clear boundaries or markers to isolate external data within the agent's context.
  • Capability inventory: The agent is authorized to use the Bash tool (defined in the allowed-tools of SKILL.md), allowing it to execute local shell commands.
  • Sanitization: The skill lacks explicit instructions for sanitizing or validating the content received from the external API.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 21, 2026, 11:35 AM