pp-stac

Pass

Audited by Gen Agent Trust Hub on Aug 10, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill facilitates discovery and metadata analysis of satellite imagery via the stac-pp-cli tool. It provides structured commands for searching, ranking cloud cover, and resolving asset URLs.
  • [COMMAND_EXECUTION]: The skill executes the stac-pp-cli binary. This is the intended primary purpose of the skill to provide STAC functionality to the agent.
  • [EXTERNAL_DOWNLOADS]: The skill provides instructions to install the CLI via npx from the @mvanhorn npm scope and via go install from the github.com/mvanhorn repository. These sources align with the skill's author context ('mvanhorn') and are documented neutrally as standard installation procedures.
  • [CREDENTIALS_UNSAFE]: The skill explicitly states 'No authentication required' for its default operations. It mentions a credentials.toml file for path resolution and state management, which is a standard practice for local configuration and not an indicator of credential theft.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 10, 2026, 08:21 AM
Security Audit — agent-trust-hub — pp-stac