pp-nejm
Pass
Audited by Gen Agent Trust Hub on Aug 11, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to install a CLI binary from the vendor's GitHub repository (github.com/mvanhorn/printing-press-library) using the Go toolchain and from npm (@mvanhorn/printing-press-library) using npx.
- [COMMAND_EXECUTION]: The skill's primary function is to execute the installed 'nejm-pp-cli' binary with various arguments to fetch and process scholarly data from the OpenAlex index and NEJM metadata sources.
- [DATA_EXFILTRATION]: The CLI tool supports a '--deliver webhook:' flag which allows command results to be transmitted to an external URL. It also features a feedback system that can be configured to send local notes to a remote endpoint via the 'NEJM_FEEDBACK_ENDPOINT' environment variable.
Audit Metadata