Skip to main content

pp-redfin

Provides advanced Redfin data analysis and workflows through a CLI, enabling users to track market trends and property comparisons.

Install this skill

or
85/100

Security score

The pp-redfin skill was audited on Jun 10, 2026 and we found 3 security issues across 2 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 291

Webhook reference - potential data exfiltration

SourceSKILL.md
291| `webhook:<url>` | POST the output body to the URL (`application/json` or `application/x-ndjson` when `--compact`) |
medium line 293

Webhook reference - potential data exfiltration

SourceSKILL.md
293Unknown schemes are refused with a structured error naming the supported set. Webhook failures return non-zero and log the URL + HTTP status on stderr.
medium line 279

Access to hidden dotfiles in home directory

SourceSKILL.md
279Entries are stored locally at `~/.redfin-pp-cli/feedback.jsonl`. They are never POSTed unless `REDFIN_FEEDBACK_ENDPOINT` is set AND either `--send` is passed or `REDFIN_FEEDBACK_AUTO_SEND=true`. Defau
Scanned on Jun 10, 2026
View Security Dashboard
Installation guide →