pp-plane

Pass

Audited by Gen Agent Trust Hub on Jul 13, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill provides instructions to download a pre-built binary from the author's GitHub repository: https://github.com/mvanhorn/printing-press-library/releases/download/plane-current/plane-pp-cli-linux-amd64. This is a standard installation method for CLI tools.
  • [EXTERNAL_DOWNLOADS]: The skill uses go install to fetch the CLI and MCP server from github.com/mvanhorn/printing-press-library/.... As these resources belong to the author's organization, this is expected behavior for a developer tool.
  • [COMMAND_EXECUTION]: The skill provides a set of commands that wrap the plane-pp-cli binary. It instructs the agent to execute these commands with the --agent flag to facilitate automated interactions with the Plane API.
  • [CREDENTIALS_UNSAFE]: The documentation describes how to set the PLANE_API_KEY_AUTHENTICATION environment variable or store it in a configuration file (~/.config/plane-pp-cli/config.toml). It correctly uses placeholders like <your-key> and follows standard practices for secret management by advising the use of environment variables rather than hardcoding.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 13, 2026, 12:54 PM
Security Audit — agent-trust-hub — pp-plane