pp-open-library
Pass
Audited by Gen Agent Trust Hub on Aug 11, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to download and install the
open-library-pp-clibinary usingnpxfrom the@mvanhorn/printing-press-libraryregistry andgo installfrom thegithub.com/mvanhorn/printing-press-libraryrepository. These resources are associated with the skill's author context. - [COMMAND_EXECUTION]: The skill is designed to execute shell commands using the
open-library-pp-clibinary to search for books, lookup ISBNs, and fetch author bibliographies. - [PROMPT_INJECTION]: The skill processes untrusted metadata from the Open Library API which could serve as a vector for indirect prompt injection.
- Ingestion points: External book, author, and edition metadata returned by the Open Library API (SKILL.md).
- Boundary markers: Absent. The skill does not define specific delimiters for the API output.
- Capability inventory: The agent is permitted to use the
Read Bashtool to execute CLI commands. - Sanitization: None. There are no instructions to sanitize or escape the content retrieved from the external API before it is processed by the agent.
Audit Metadata