pp-adminbyrequest
Pass
Audited by Gen Agent Trust Hub on Jul 28, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to download the CLI tool using
npxfrom a well-known scoped package (@mvanhorn/printing-press-library). This is standard procedure for installing development tools from established registries. - [REMOTE_CODE_EXECUTION]: The skill mentions installation via
go installfrom a specific GitHub repository (github.com/mvanhorn/printing-press-library). This is a legitimate installation method for Go-based tooling from the vendor's repository. - [COMMAND_EXECUTION]: The skill's primary purpose is to drive the
adminbyrequest-pp-clibinary. All command execution patterns described are consistent with the skill's stated purpose of managing the Admin By Request portal and local SQLite mirror. - [CREDENTIALS_UNSAFE]: The skill correctly instructs the user to manage their API key via an environment variable (
ADMINBYREQUEST_API_KEY), which is a security best practice compared to hardcoding secrets. - [DATA_EXFILTRATION]: While the skill includes a
--deliver webhook:<url>feature, this is documented as a user-configurable output sink for routing command results, not a hidden exfiltration mechanism. The default behavior is local-only.
Audit Metadata