pp-soccer-goat
Pass
Audited by Gen Agent Trust Hub on Jul 28, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of the
soccer-goat-pp-clibinary from the vendor's official GitHub repository and NPM package registry. - [REMOTE_CODE_EXECUTION]: Installation instructions utilize
go installandnpx, which download and execute code from remote repositories to provision the necessary CLI environment. - [COMMAND_EXECUTION]: The skill operates by executing shell commands through the
soccer-goat-pp-clitool, including a complex 'Automatic Learning' loop that manages a local SQLite database to optimize future scouting queries. - [DATA_EXFILTRATION]: The CLI tool supports a
--deliver webhook:<url>flag, which enables the agent to transmit retrieved soccer statistics and market data to external HTTP endpoints as part of its output delivery system. - [PROMPT_INJECTION]: The 'Automatic Learning' and 'Playbook' systems create a persistent attack surface where future agent actions and command sequences are influenced by data ingested from external soccer APIs and previously stored query patterns.
Audit Metadata