pp-erank

Pass

Audited by Gen Agent Trust Hub on Aug 19, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes the erank-pp-cli binary to perform keyword research tasks. This is the primary purpose of the skill and follows standard CLI interaction patterns.
  • [EXTERNAL_DOWNLOADS]: The skill provides instructions to install its core binary using npx from the official NPM registry (@mvanhorn/printing-press-library) or via go install from the vendor's official GitHub repository (github.com/mvanhorn/printing-press-library). These are trusted sources for the vendor's own tools.
  • [DATA_EXFILTRATION]: The feedback command and --deliver webhook:<url> flag allow data to be sent to external endpoints. However, the feedback mechanism is local-only by default (stored in ~/.local/share/erank-pp-cli/feedback.jsonl), and the webhook functionality is an explicit user-configured feature for routing command output, not a hidden exfiltration vector.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 19, 2026, 04:12 AM