pp-rentalcarspain
Pass
Audited by Gen Agent Trust Hub on Aug 24, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to install the
rentalcarspain-pp-cliutility throughnpxandgo installfrom the author's GitHub repository. - [COMMAND_EXECUTION]: Operates by executing various search and tracking commands through the
bashtool. - [DATA_EXFILTRATION]: The CLI tool supports a
--deliver webhook:<url>flag which allows users to direct command output to arbitrary external URLs, and afeedbackcommand for uploading local journal data. - [COMMAND_EXECUTION]: Features a dynamic "playbook" mechanism that constructs and runs shell commands by substituting query entities into learned templates.
- [PROMPT_INJECTION]: The skill processes data from external car rental sources and customer reviews, presenting an indirect injection surface.
- Ingestion points: Data retrieved from car rental aggregator and supplier websites.
- Boundary markers: No specific delimiters or safety instructions are defined in the prompt construction logic.
- Capability inventory: Shell command execution via
bashand local filesystem/database writes. - Sanitization: Users are instructed to remove personally identifiable information (PII) before using the
teachcommand to save results.
Audit Metadata