pp-multimail
Pass
Audited by Gen Agent Trust Hub on May 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the
multimail-pp-clitool usingnpxfrom the vendor's official@mvanhorn/printing-pressnpm package andgo installfrom the vendor's repository atgithub.com/mvanhorn/printing-press-library. These resources are hosted on well-known, trusted registries. - [COMMAND_EXECUTION]: The skill executes the
multimail-pp-clibinary to perform various email-related tasks, including account management, API key rotation, and audit log retrieval. It also invokesnpx,go, andclaudecommands during the initial setup and configuration phases. - [DATA_EXFILTRATION]: The CLI includes a documented
--deliver webhook:<url>feature. This capability allows the agent to route the JSON output of any command to an external HTTP endpoint, providing a functional mechanism for data delivery to third-party services.
Audit Metadata