pp-setlist-fm
Pass
Audited by Gen Agent Trust Hub on Jul 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of the
setlist-fm-pp-clitool usingnpxtargeting the@mvanhorn/printing-press-librarypackage andgo installtargeting thegithub.com/mvanhorn/printing-press-libraryrepository. Both resources are owned by the skill's author. - [DATA_EXFILTRATION]: The underlying CLI tool supports a
--deliver webhook:<url>flag, which enables the agent to POST command results to an external endpoint. Additionally, theauth set-tokencommand facilitates the storage of API credentials in a local configuration file for persistence. - [PROMPT_INJECTION]: The skill processes artist and tour data retrieved from the external Setlist.fm API, presenting an indirect prompt injection surface.
- Ingestion points: External data enters the agent context via responses from the Setlist.fm API (referenced in
SKILL.md). - Boundary markers: The skill does not implement explicit delimiters or instructions to ignore embedded commands within the ingested API data.
- Capability inventory: The skill possesses capabilities for shell command execution (
Read Bash), local file writes (--deliver file), and network transmission (--deliver webhook). - Sanitization: There is no evidence of content sanitization or schema validation for the data returned by the external API.
Audit Metadata