pp-walmart
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads and installs CLI binaries using
npxandgo installfrom repositories associated with the author 'mvanhorn' (github.com/mvanhorn/printing-press-library). These are standard installation procedures for this vendor's tools. - [COMMAND_EXECUTION]: The skill is designed to execute the
walmart-pp-clibinary to perform searches, retrieve order history, and generate cart links. These operations are limited to the scope of the Walmart integration and explicitly avoid mutations like checkout or payment. - [DATA_EXPOSURE]: The skill specifically mentions that customer PII (names, addresses, phones, and payment data) is never emitted by the CLI tools. It reads only purchase history, product data, and store information.
- [DYNAMIC_EXECUTION]: The skill uses a 'learning loop' (
recall,teach) that saves and retrieves local execution metadata to help the agent choose better commands in the future. This data is stored locally in the user's data directory and is not exfiltrated unless explicitly configured by the user via a feedback endpoint.
Audit Metadata