pp-here-now

Pass

Audited by Gen Agent Trust Hub on Aug 20, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill installs its CLI tool using npx -y @mvanhorn/printing-press-library or go install github.com/mvanhorn/printing-press-library/.... These sources are owned by the skill author (mvanhorn) and are used for their intended purpose of providing the tool's binary.
  • [COMMAND_EXECUTION]: The skill executes the here-now-pp-cli binary to perform its core functions such as publish, drives sync, and usage. It also provides instructions for installing the tool via npx and go install.
  • [DATA_EXFILTRATION]: While the skill can send output to a webhook via the --deliver webhook:<url> flag, this is a documented feature for routing command results and requires explicit user-provided URLs.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 20, 2026, 07:16 AM