pp-qbo

Pass

Audited by Gen Agent Trust Hub on Aug 18, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill provides instructions for installing a CLI tool via NPM (@mvanhorn/printing-press-library) and Go (github.com/mvanhorn/printing-press-library). These resources are hosted on well-known platforms (NPM registry and GitHub) and belong to the skill's author (mvanhorn).
  • [COMMAND_EXECUTION]: The skill facilitates the execution of the qbo-pp-cli tool. It provides a comprehensive command reference for managing accounting entities like invoices, bills, and customers. The instructions include a which command for natural language capability discovery and an --agent flag for automated interaction.
  • [DATA_EXPOSURE]: The auth login command handles sensitive credentials (Client ID and Client Secret). The skill correctly advises using environment variables for configuration and specifies that feedback logs are stored locally at ~/.local/share/qbo-pp-cli/feedback.jsonl, with no automatic external transmission unless explicitly configured by the user.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 18, 2026, 03:27 AM
Security Audit — agent-trust-hub — pp-qbo