pp-wanderlust-goat
Pass
Audited by Gen Agent Trust Hub on May 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSDATA_EXFILTRATIONCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the installation of a CLI and MCP server from vendor-controlled repositories:
- NPM package
@mvanhorn/printing-pressvianpx. - Go modules from
github.com/mvanhorn/printing-press-libraryviago install. - [DATA_EXFILTRATION]: The CLI tool includes a
--deliver webhook:<url>flag. This enables the agent to send the output of any command (which may contain travel research or tool results) to an arbitrary external URL via HTTP POST. - [COMMAND_EXECUTION]: The skill relies on shell command execution for both its installation process and its primary functional commands.
- [PROMPT_INJECTION]: The skill has an indirect prompt injection surface due to the following:
- Ingestion points: Untrusted data is retrieved from external sources like Reddit, Wikipedia, and Atlas Obscura via the
near,reddit-quotes, andsync-citycommands (SKILL.md). - Boundary markers: No delimiters or safety instructions are provided to help the agent distinguish between data and potential instructions within the fetched content.
- Capability inventory: The tool can execute shell commands and perform network requests (webhooks).
- Sanitization: There is no evidence of sanitization or filtering of the external data before it is processed by the agent.
Audit Metadata