pp-greenhouse
Pass
Audited by Gen Agent Trust Hub on Aug 20, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATIONREMOTE_CODE_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches the
greenhouse-pp-clibinary from the vendor's official repositories to enable core functionality. - Uses
npx -y @mvanhorn/printing-press-libraryto install the CLI package from NPM. - Uses
go install github.com/mvanhorn/printing-press-library/library/other/greenhouse/cmd/greenhouse-pp-cli@latestas a fallback installation method. - [COMMAND_EXECUTION]: Executes the
greenhouse-pp-clibinary to perform Greenhouse API operations and manage local learning state. - Invokes subcommands such as
departments,jobs,offices,recall,teach, andplaybookto fulfill user requests. - [DATA_EXFILTRATION]: Provides a built-in mechanism to route command output to external URLs via a webhook feature.
- The
--deliver webhook:<url>flag allows the agent to POST data directly to a specified destination for integration or automation purposes. - [REMOTE_CODE_EXECUTION]: The "Playbook" system enables the execution of stored shell command sequences with slot substitution.
- The agent is instructed to replay steps defined in local JSON/Markdown files (
playbooks/*.json,playbooks/*.md) that were generated and validated in previous sessions.
Audit Metadata