pp-grubhub

Pass

Audited by Gen Agent Trust Hub on Jul 28, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill provides instructions to download and install its core CLI tool and MCP server from GitHub and NPM registries using go install and npx. These are established platforms and the repository github.com/mvanhorn/printing-press-library is the home of the tool's author.
  • [COMMAND_EXECUTION]: The skill is designed to execute the grubhub-pp-cli binary to perform its functions. It also provides commands for environment verification (grubhub-pp-cli doctor) and installation. These commands are directly related to the skill's primary purpose.
  • [DATA_EXFILTRATION]: The skill includes a --deliver webhook:<url> feature that allows routing command output to a specified URL. While this is a data export capability, it is documented as a core feature for automation and requires explicit user-provided URLs. The feedback command also has an optional --send flag to POST notes to a user-defined endpoint.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 28, 2026, 09:18 AM
Security Audit — agent-trust-hub — pp-grubhub