pp-eu-tenders

Pass

Audited by Gen Agent Trust Hub on Oct 6, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill provides instructions to install its core CLI tools using npx from @mvanhorn/printing-press-library and via go install from github.com/mvanhorn/printing-press-library. These resources are hosted by the official vendor and are standard installation procedures for this toolset.
  • [COMMAND_EXECUTION]: The skill's primary function is to wrap and execute the eu-tenders-pp-cli binary. It uses the Read Bash tool to perform searches, generate reports, and analyze procurement data. The instructions specify using the --agent flag for non-interactive, machine-readable output, which is a standard pattern for agent-integrated CLIs.
  • [DATA_EXFILTRATION]: While the CLI supports a --deliver webhook:<url> feature to POST command output to a URL, this is documented as an explicit feature for routing data. The default behavior is local output to stdout or files. There are no signs of silent or unauthorized data exfiltration.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 6, 2026, 07:04 PM