pp-open-library

Pass

Audited by Gen Agent Trust Hub on Aug 11, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill provides instructions to download and install the open-library-pp-cli binary using npx from the @mvanhorn/printing-press-library registry and go install from the github.com/mvanhorn/printing-press-library repository. These resources are associated with the skill's author context.
  • [COMMAND_EXECUTION]: The skill is designed to execute shell commands using the open-library-pp-cli binary to search for books, lookup ISBNs, and fetch author bibliographies.
  • [PROMPT_INJECTION]: The skill processes untrusted metadata from the Open Library API which could serve as a vector for indirect prompt injection.
  • Ingestion points: External book, author, and edition metadata returned by the Open Library API (SKILL.md).
  • Boundary markers: Absent. The skill does not define specific delimiters for the API output.
  • Capability inventory: The agent is permitted to use the Read Bash tool to execute CLI commands.
  • Sanitization: None. There are no instructions to sanitize or escape the content retrieved from the external API before it is processed by the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 11, 2026, 03:01 AM
Security Audit — agent-trust-hub — pp-open-library