pp-tidycal
Pass
Audited by Gen Agent Trust Hub on Jul 11, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads and installs its core CLI and MCP server components from the author's official GitHub repository (
github.com/mvanhorn/printing-press-library) usinggo installandnpx. - [COMMAND_EXECUTION]: The skill is designed to execute the
tidycal-pp-clibinary to perform various scheduling and management tasks. It includes features for piping output to files or webhooks and managing local profiles. - [DATA_EXFILTRATION]: While the skill supports sending output to webhooks (
--deliver webhook:<url>), this is a documented feature for routing command results and requires explicit user-provided parameters. - [CREDENTIALS_UNSAFE]: The documentation provides instructions for manual authentication (
auth set-token YOUR_TOKEN_HERE), but does not contain or solicit any hardcoded secrets.
Audit Metadata