pp-shopping

Pass

Audited by Gen Agent Trust Hub on Jul 12, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill provides instructions to download and install the commerce CLI tools from the author's official repositories using package managers. Specifically, it uses npx to fetch the @mvanhorn/printing-press-library package and go install to fetch the shopping-pp-cli module from GitHub.
  • [COMMAND_EXECUTION]: The skill is designed to wrap the shopping-pp-cli binary, executing shell commands to perform data synchronization with a local SQLite database and to query the LemmeBuyIt retail API.
  • [DATA_EXFILTRATION]: The CLI tool includes a documented --deliver webhook:<url> feature that allows the agent to route command results and retail data to an external HTTP endpoint in addition to standard output.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 12, 2026, 07:03 AM
Security Audit — agent-trust-hub — pp-shopping