pp-gohighlevel

Pass

Audited by Gen Agent Trust Hub on Sep 3, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill provides instructions to install the gohighlevel-pp-cli via npx from the @mvanhorn/printing-press-library package and via go install from a GitHub repository owned by mvanhorn. Both sources align with the skill's author context and are documented for standard installation purposes.
  • [COMMAND_EXECUTION]: The skill relies on executing the gohighlevel-pp-cli binary to perform CRM tasks. It uses common command-line patterns for data processing, such as piping file contents (cat emails.csv) into the CLI for bulk operations.
  • [DATA_EXFILTRATION]: While the skill interacts with CRM data and supports a --deliver webhook:<url> feature to POST output to a URL, this is a documented administrative feature of the CLI tool rather than a hidden exfiltration attempt. The skill follows standard authentication practices using environment variables for API tokens.
  • [SAFE]: The skill's primary purpose is to serve as a terminal interface for GoHighLevel CRM. The operations described (deduplication, pipeline reporting, bulk tagging) are legitimate business tasks, and the technical mechanisms (local SQLite cache, HTTP transport) are transparently documented.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 3, 2026, 10:07 PM