pp-help-scout
Pass
Audited by Gen Agent Trust Hub on Aug 19, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill facilitates installation of the
help-scout-pp-clivianpxfrom the vendor's package@mvanhorn/printing-press-library. This is a standard installation procedure for the tool. - [EXTERNAL_DOWNLOADS]: The skill provides instructions for installing the CLI and MCP server directly from the vendor's GitHub repository (
github.com/mvanhorn/printing-press-library) usinggo install. These are legitimate source-based installations from the author's infrastructure. - [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands to interact with the Help Scout API. The operations are limited to read-only actions (list, get) as defined in the 'When Not to Use This CLI' section, which follows the principle of least privilege.
- [DATA_EXFILTRATION]: While the CLI includes a
--deliver webhook:<url>flag that can POST data to a remote URL, this is a documented feature for routing command output and is not used covertly in the provided instructions. - [CREDENTIALS_UNSAFE]: The skill provides instructions for setting up authentication using
auth set-token YOUR_TOKEN_HEREor theHELP_SCOUT_BEARER_AUTHenvironment variable. These are standard practices for managing API credentials and no secrets are hardcoded in the skill itself.
Audit Metadata