pp-greenhouse

Pass

Audited by Gen Agent Trust Hub on Aug 20, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATIONREMOTE_CODE_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Fetches the greenhouse-pp-cli binary from the vendor's official repositories to enable core functionality.
  • Uses npx -y @mvanhorn/printing-press-library to install the CLI package from NPM.
  • Uses go install github.com/mvanhorn/printing-press-library/library/other/greenhouse/cmd/greenhouse-pp-cli@latest as a fallback installation method.
  • [COMMAND_EXECUTION]: Executes the greenhouse-pp-cli binary to perform Greenhouse API operations and manage local learning state.
  • Invokes subcommands such as departments, jobs, offices, recall, teach, and playbook to fulfill user requests.
  • [DATA_EXFILTRATION]: Provides a built-in mechanism to route command output to external URLs via a webhook feature.
  • The --deliver webhook:<url> flag allows the agent to POST data directly to a specified destination for integration or automation purposes.
  • [REMOTE_CODE_EXECUTION]: The "Playbook" system enables the execution of stored shell command sequences with slot substitution.
  • The agent is instructed to replay steps defined in local JSON/Markdown files (playbooks/*.json, playbooks/*.md) that were generated and validated in previous sessions.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 20, 2026, 01:02 PM
Security Audit — agent-trust-hub — pp-greenhouse