pp-plane
Pass
Audited by Gen Agent Trust Hub on Jul 13, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to download a pre-built binary from the author's GitHub repository:
https://github.com/mvanhorn/printing-press-library/releases/download/plane-current/plane-pp-cli-linux-amd64. This is a standard installation method for CLI tools. - [EXTERNAL_DOWNLOADS]: The skill uses
go installto fetch the CLI and MCP server fromgithub.com/mvanhorn/printing-press-library/.... As these resources belong to the author's organization, this is expected behavior for a developer tool. - [COMMAND_EXECUTION]: The skill provides a set of commands that wrap the
plane-pp-clibinary. It instructs the agent to execute these commands with the--agentflag to facilitate automated interactions with the Plane API. - [CREDENTIALS_UNSAFE]: The documentation describes how to set the
PLANE_API_KEY_AUTHENTICATIONenvironment variable or store it in a configuration file (~/.config/plane-pp-cli/config.toml). It correctly uses placeholders like<your-key>and follows standard practices for secret management by advising the use of environment variables rather than hardcoding.
Audit Metadata