pp-blacklane
Pass
Audited by Gen Agent Trust Hub on Jul 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONDATA_EXFILTRATIONCREDENTIALS_UNSAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the
blacklane-pp-clibinary and related components from the author's official NPM package (@mvanhorn/printing-press-library) and GitHub repository (github.com/mvanhorn/printing-press-library). - [REMOTE_CODE_EXECUTION]: Installation instructions utilize
npxandgo installto fetch and execute code from remote repositories during the setup phase. - [COMMAND_EXECUTION]: The skill functions by executing the locally installed
blacklane-pp-clitool to perform all ride-sharing and quote operations. - [DATA_EXFILTRATION]: The CLI tool includes a
--deliver webhook:<url>feature that allows the output of any command to be sent to an external URL. While a standard feature for automation, it provides a mechanism for routing command results off-system. - [CREDENTIALS_UNSAFE]: The authentication process involves manual steps for the user to provide session tokens from their browser or clipboard to the CLI tool to enable account-specific functionality.
Audit Metadata