pp-walmart

Pass

Audited by Gen Agent Trust Hub on Oct 14, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill downloads and installs CLI binaries using npx and go install from repositories associated with the author 'mvanhorn' (github.com/mvanhorn/printing-press-library). These are standard installation procedures for this vendor's tools.
  • [COMMAND_EXECUTION]: The skill is designed to execute the walmart-pp-cli binary to perform searches, retrieve order history, and generate cart links. These operations are limited to the scope of the Walmart integration and explicitly avoid mutations like checkout or payment.
  • [DATA_EXPOSURE]: The skill specifically mentions that customer PII (names, addresses, phones, and payment data) is never emitted by the CLI tools. It reads only purchase history, product data, and store information.
  • [DYNAMIC_EXECUTION]: The skill uses a 'learning loop' (recall, teach) that saves and retrieves local execution metadata to help the agent choose better commands in the future. This data is stored locally in the user's data directory and is not exfiltrated unless explicitly configured by the user via a feedback endpoint.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 14, 2026, 05:04 PM