pp-axs

Pass

Audited by Gen Agent Trust Hub on Aug 20, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill downloads and installs a CLI tool and an MCP server from the author's own repository (github.com/mvanhorn/printing-press-library). It also uses npx to fetch a package from the author's scoped NPM registry (@mvanhorn/printing-press-library). These are standard operations for a CLI-based skill and point to the vendor's own infrastructure.
  • [COMMAND_EXECUTION]: The skill facilitates the execution of the axs-pp-cli binary to interact with SRAM AXS account data. It includes a feedback command that saves data locally to ~/.local/share/axs-pp-cli/feedback.jsonl and a --deliver flag that can route output to local files or webhooks. These features are documented as standard CLI functionality for managing bicycle component data.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 20, 2026, 08:37 AM
Security Audit — agent-trust-hub — pp-axs