pp-erank
Pass
Audited by Gen Agent Trust Hub on Jul 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONDATA_EXFILTRATIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of the
erank-pp-clianderank-pp-mcptools from vendor-controlled external sources. - Evidence: Instructions to use
go install github.com/mvanhorn/printing-press-library/library/marketing/erank/cmd/erank-pp-cli@latest. - Evidence: Instructions to use
npx -y @mvanhorn/printing-press-library install erank --cli-only. - [REMOTE_CODE_EXECUTION]: The installation process involves executing code directly from the npm registry and GitHub to set up the necessary binaries.
- Evidence: Use of
npxto execute the@mvanhorn/printing-press-libraryinstaller. - Evidence: Use of
go installfor binary compilation from the specified Go module path. - [DATA_EXFILTRATION]: The documented CLI includes features for transmitting data to external endpoints, which are intended for automation and feedback.
- Evidence: Documentation of the
--deliver webhook:<url>flag, which allows the output of keyword research to be POSTed to an arbitrary URL. - Evidence: The
feedbackcommand allows sending local notes to a remote endpoint if theERANK_FEEDBACK_ENDPOINTenvironment variable is configured. - [COMMAND_EXECUTION]: The skill utilizes shell commands to interact with the local environment and the installed
erank-pp-clibinary. - Evidence: Execution of various commands such as
opportunity,listing gaps, andtags consensuswith user-supplied arguments. - Evidence: System verification using
which erank-pp-clianderank-pp-cli --version.
Audit Metadata