pp-rentalcarspain

Pass

Audited by Gen Agent Trust Hub on Aug 24, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill provides instructions to install the rentalcarspain-pp-cli utility through npx and go install from the author's GitHub repository.
  • [COMMAND_EXECUTION]: Operates by executing various search and tracking commands through the bash tool.
  • [DATA_EXFILTRATION]: The CLI tool supports a --deliver webhook:<url> flag which allows users to direct command output to arbitrary external URLs, and a feedback command for uploading local journal data.
  • [COMMAND_EXECUTION]: Features a dynamic "playbook" mechanism that constructs and runs shell commands by substituting query entities into learned templates.
  • [PROMPT_INJECTION]: The skill processes data from external car rental sources and customer reviews, presenting an indirect injection surface.
  • Ingestion points: Data retrieved from car rental aggregator and supplier websites.
  • Boundary markers: No specific delimiters or safety instructions are defined in the prompt construction logic.
  • Capability inventory: Shell command execution via bash and local filesystem/database writes.
  • Sanitization: Users are instructed to remove personally identifiable information (PII) before using the teach command to save results.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 24, 2026, 04:38 AM
Security Audit — agent-trust-hub — pp-rentalcarspain