pp-help-scout

Pass

Audited by Gen Agent Trust Hub on Aug 19, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill facilitates installation of the help-scout-pp-cli via npx from the vendor's package @mvanhorn/printing-press-library. This is a standard installation procedure for the tool.
  • [EXTERNAL_DOWNLOADS]: The skill provides instructions for installing the CLI and MCP server directly from the vendor's GitHub repository (github.com/mvanhorn/printing-press-library) using go install. These are legitimate source-based installations from the author's infrastructure.
  • [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands to interact with the Help Scout API. The operations are limited to read-only actions (list, get) as defined in the 'When Not to Use This CLI' section, which follows the principle of least privilege.
  • [DATA_EXFILTRATION]: While the CLI includes a --deliver webhook:<url> flag that can POST data to a remote URL, this is a documented feature for routing command output and is not used covertly in the provided instructions.
  • [CREDENTIALS_UNSAFE]: The skill provides instructions for setting up authentication using auth set-token YOUR_TOKEN_HERE or the HELP_SCOUT_BEARER_AUTH environment variable. These are standard practices for managing API credentials and no secrets are hardcoded in the skill itself.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 19, 2026, 10:36 PM
Security Audit — agent-trust-hub — pp-help-scout