pp-grubhub
Pass
Audited by Gen Agent Trust Hub on Jul 28, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to download and install its core CLI tool and MCP server from GitHub and NPM registries using
go installandnpx. These are established platforms and the repositorygithub.com/mvanhorn/printing-press-libraryis the home of the tool's author. - [COMMAND_EXECUTION]: The skill is designed to execute the
grubhub-pp-clibinary to perform its functions. It also provides commands for environment verification (grubhub-pp-cli doctor) and installation. These commands are directly related to the skill's primary purpose. - [DATA_EXFILTRATION]: The skill includes a
--deliver webhook:<url>feature that allows routing command output to a specified URL. While this is a data export capability, it is documented as a core feature for automation and requires explicit user-provided URLs. Thefeedbackcommand also has an optional--sendflag to POST notes to a user-defined endpoint.
Audit Metadata