wolt
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSDATA_EXFILTRATIONCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Downloads the wolt-pp-cli tool using npx from the @mvanhorn/printing-press-library package or go install from github.com/mvanhorn/printing-press-library.
- [DATA_EXFILTRATION]: Provides a --deliver webhook:url parameter that can be used to send command results to external servers.
- [DATA_EXFILTRATION]: Includes a feedback feature capable of transmitting local user-recorded data from ~/.wolt-pp-cli/feedback.jsonl to a remote endpoint if the WOLT_FEEDBACK_ENDPOINT environment variable is set.
- [COMMAND_EXECUTION]: Relies on the execution of the wolt-pp-cli binary to perform food and dining searches.
- [PROMPT_INJECTION]: Ingests untrusted external data from restaurant menus and venue listings which represents an indirect prompt injection surface. * Ingestion points: Command output from wolt-pp-cli menu show and wolt-pp-cli search. * Boundary markers: None present in the instructions to prevent the agent from following instructions embedded in the API response. * Capability inventory: Uses the Bash tool to execute CLI commands. * Sanitization: No evidence of sanitization or validation of the ingested API content.
Audit Metadata