pp-opensky

Fail

Audited by Gen Agent Trust Hub on Sep 5, 2026

Risk Level: HIGHREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTIONCOMMAND_EXECUTION
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The skill instructs the agent to download and execute code from an untrusted source using npx -y @mvanhorn/printing-press-library and go install github.com/mvanhorn/printing-press-library/... This pattern facilitates the execution of unverified binaries on the host system.
  • [DATA_EXFILTRATION]: The CLI tool contains a built-in --deliver webhook:url functionality which allows routing any command output to an arbitrary external URL via a POST request.
  • [COMMAND_EXECUTION]: The skill relies on executing the opensky-pp-cli binary via Bash to perform its primary functions.
  • [INDIRECT_PROMPT_INJECTION]: The skill implements a learning loop that ingests user queries to generate automation playbooks. Ingestion points: User queries are read from temporary files via the --query-file flag. Boundary markers: The skill recommends using temp files and warns against shell interpolation. Capability inventory: The tool can query aircraft states and retrieve trajectories. Sanitization: The tool performs PII scanning on queries.
  • [DYNAMIC_EXECUTION]: The skill's Playbook system uses slot substitution to dynamically generate and execute shell commands based on previously stored patterns and processed results.
Recommendations
  • AI detected serious security threats
Audit Metadata
Risk Level
HIGH
Analyzed
Sep 5, 2026, 11:00 AM