pp-shopper

Pass

Audited by Gen Agent Trust Hub on Sep 22, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructions direct the agent to download and install the shopper-pp-cli binary using npx from @mvanhorn/printing-press-library and go install from github.com/mvanhorn/printing-press-library. These are vendor-owned resources necessary for the skill's primary functionality.\n- [COMMAND_EXECUTION]: The skill uses the Read Bash tool to execute the shopper-pp-cli binary, which manages storefront tasks such as cart modification and spend analysis.\n- [INDIRECT_PROMPT_INJECTION]: The skill retrieves and processes data from external Shopper storefront APIs, presenting a potential attack surface for indirect prompt injection.\n
  • Ingestion points: Data is fetched from storefront catalog search, order history, and recurring basket summaries via the CLI tool.\n
  • Boundary markers: The skill specifies the use of the --agent flag, which ensures that output is returned in a structured JSON format.\n
  • Capability inventory: The skill has the ability to execute bash commands, perform network operations, and interact with a local SQLite database.\n
  • Sanitization: No specific sanitization or validation of the API-sourced content is mentioned before it is processed by the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 22, 2026, 01:33 PM