pp-kdpnichefinder
Pass
Audited by Gen Agent Trust Hub on Aug 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads its primary executable from the author's GitHub repository (
github.com/mvanhorn/printing-press-library). This is the expected behavior for a tool-based skill and targets the vendor's own infrastructure.- [COMMAND_EXECUTION]: The skill executes shell commands to interact with thekdpnichefinder-pp-clitool. These commands include niche ranking, revenue drift analysis, and keyword tokenization. All commands are scoped to the tool's intended purpose of KDP market research.- [DATA_EXFILTRATION]: The skill features a--deliver webhook:<url>flag that allows users to POST command output to a specified URL. While this is a data movement capability, it is an explicit, user-triggered feature for routing research data and does not target sensitive system files.
Audit Metadata