pp-erank

Pass

Audited by Gen Agent Trust Hub on Jul 9, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONDATA_EXFILTRATIONCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of the erank-pp-cli and erank-pp-mcp tools from vendor-controlled external sources.
  • Evidence: Instructions to use go install github.com/mvanhorn/printing-press-library/library/marketing/erank/cmd/erank-pp-cli@latest.
  • Evidence: Instructions to use npx -y @mvanhorn/printing-press-library install erank --cli-only.
  • [REMOTE_CODE_EXECUTION]: The installation process involves executing code directly from the npm registry and GitHub to set up the necessary binaries.
  • Evidence: Use of npx to execute the @mvanhorn/printing-press-library installer.
  • Evidence: Use of go install for binary compilation from the specified Go module path.
  • [DATA_EXFILTRATION]: The documented CLI includes features for transmitting data to external endpoints, which are intended for automation and feedback.
  • Evidence: Documentation of the --deliver webhook:<url> flag, which allows the output of keyword research to be POSTed to an arbitrary URL.
  • Evidence: The feedback command allows sending local notes to a remote endpoint if the ERANK_FEEDBACK_ENDPOINT environment variable is configured.
  • [COMMAND_EXECUTION]: The skill utilizes shell commands to interact with the local environment and the installed erank-pp-cli binary.
  • Evidence: Execution of various commands such as opportunity, listing gaps, and tags consensus with user-supplied arguments.
  • Evidence: System verification using which erank-pp-cli and erank-pp-cli --version.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 9, 2026, 05:29 AM
Security Audit — agent-trust-hub — pp-erank