pp-tripadvisor
Pass
Audited by Gen Agent Trust Hub on Aug 24, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches and installs the tripadvisor-pp-cli and tripadvisor-pp-mcp tools from the author's official GitHub repository (github.com/mvanhorn/printing-press-library) and via the @mvanhorn/printing-press-library NPM package. These resources belong to the skill's authoring vendor.- [COMMAND_EXECUTION]: Uses the Bash tool to execute the tripadvisor-pp-cli for Tripadvisor search, comparison, and analysis tasks.- [INDIRECT_PROMPT_INJECTION]: The skill processes traveler reviews and other user-generated content from the Tripadvisor API via the reviews and digest commands. 1. Ingestion points: The reviews and digest commands in SKILL.md return traveler-generated text. 2. Boundary markers: No explicit delimiters or 'ignore embedded instructions' warnings are provided for the agent when handling this external content. 3. Capability inventory: The skill utilizes Bash for command execution. 4. Sanitization: The instructions note that raw user-generated text is returned for the agent to interpret, without specific sanitization or filtering mentioned.
Audit Metadata