pp-running-race-results

Pass

Audited by Gen Agent Trust Hub on Jul 28, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the user to install a command-line utility using either npx (from the @mvanhorn/printing-press-library package) or go install (from github.com/mvanhorn/printing-press-library). These are standard installation methods for developer tools and the sources correspond to the author's identified vendor infrastructure.
  • [COMMAND_EXECUTION]: The skill uses the Bash tool to execute the running-race-results-pp-cli binary. This is the primary function of the skill to fetch and display race data. The documented commands are restricted to read-only operations for retrieving sports statistics.
  • [CREDENTIALS_UNSAFE]: The documentation mentions an optional ATHLINKS_TOKEN environment variable. This follows standard security practices for managing API authentication through the environment rather than hardcoding sensitive values.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 28, 2026, 09:18 AM
Security Audit — agent-trust-hub — pp-running-race-results