pp-drudgereport

Pass

Audited by Gen Agent Trust Hub on Jun 15, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructions direct the agent to install the drudgereport-pp-cli binary using npx from the @mvanhorn/printing-press-library npm package or via go install from github.com/mvanhorn/printing-press-library. These resources are owned by the skill's verified author.
  • [COMMAND_EXECUTION]: The skill functions by executing the drudgereport-pp-cli tool through the bash shell to fetch, sync, and analyze news data.
  • [DATA_EXFILTRATION]: The CLI includes a --deliver webhook:<url> feature that allows the output of commands—primarily news headlines and editorial metadata—to be sent to an external URL via an HTTP POST request. While this facilitates data movement, it is a documented feature of the tool for routing the public information it retrieves.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 15, 2026, 02:33 AM
Security Audit — agent-trust-hub — pp-drudgereport