Cursor, Plugin
Digital Marketing Pro
An open-source AI based digital marketing operating system for strategy, SEO, AEO/GEO, paid media, content, CRM, and analytics - grounded in brand context, human approval, and verifiable outputs.
Compatibility: Portable across standard formats.
Grade D
Two or more Medium findings, or a High finding. Only try it in a sandbox.
Not a guarantee. A hygiene check of the source at the commit shown, not a security audit.
Rescanned at commit dd65250cfe4e, unchanged since the check below.
NETWORK_HOST_FROM_INPUT SECRETS_PATH_CREDENTIAL
Why this grade
- NETWORK_HOST_FROM_INPUT High
A file takes a URL or endpoint as input and has no fixed host list.
scripts/agent-readiness-audit.py, line 829
def fetch(url: str, timeout: int = 15) -> tuple[int | None, str, str | None]: - SECRETS_PATH_CREDENTIAL Medium
Mentions a credential store path (~/.ssh, id_rsa, .npmrc, .aws/credentials, credentials.json, .netrc).
.gitignore, line 32
credentials.json
Any High, or two or more Medium findings, give D. One Medium gives C. Low findings or a security Note give B. Each code names a finding behind the letter.
If you think this grade is wrong, email [email protected] with the entry link and your evidence. We aim to acknowledge within two working days and decide within seven. If we confirm an error, we aim to correct it within 24 hours of confirming it. These are aims, not guarantees.
Grades are a hygiene check of the source at the commit shown, on the date checked, not a security audit or a guarantee. The free directory grades are automated. Before release, a PlugVet engineer reviews every paid report and any grade we hold back, including all F grades, against the source code and the evidence we quote.
What was checked
Plain notes from the hygiene checks.
Permissions
Concern
can delete files.
PERMISSION_DELETE_FILES
scripts/auto-save-insight.py, line 152
result = subprocess.run(
scripts/checkpoint-manager.py, line 313
shutil.rmtree(rd)
scripts/embed-c2pa.py, line 439
shutil.rmtree(tmpdir, ignore_errors=True)
Show more
scripts/eval-runner.py, line 247
result = subprocess.run(
scripts/output-publisher.py, line 197
subprocess.run(["open", str(path)], check=False)
scripts/output-publisher.py, line 199
subprocess.run(["xdg-open", str(path)], check=False)
scripts/run-audit.py, line 118
proc = subprocess.run(
scripts/setup.py, line 280
subprocess.check_call(
Install and update
Pass
No install-time script found, and dependencies are pinned or absent.
Network
Serious
accepts a host from input, with no fixed list in this file.
NETWORK_HOST_FROM_INPUT
scripts/agent-readiness-audit.py, line 829
def fetch(url: str, timeout: int = 15) -> tuple[int | None, str, str | None]:
scripts/agent-readiness-audit.py, line 909
code, body, err = fetch(url)
scripts/agent-readiness-audit.py, line 925
code, body, err = fetch(url)
Show more
scripts/agent-readiness-audit.py, line 986
ap.add_argument("--page", action="append", help="Extra page URL to fetch (repeatable; needs --fetch)")
scripts/competitor-scraper.py, line 92
resp = requests.get(url, timeout=timeout, headers=headers, allow_redirects=False)
scripts/connector_executor.py, line 433
response = urllib.request.urlopen(req, timeout=timeout)
scripts/refresh_models.py, line 46
with urllib.request.urlopen(req, timeout=timeout) as resp:
CHANGELOG.md, line 121
- An approval record was released whenever a send failed without an HTTP status, on the reading that nothing had reached the platform. But a timeout or reset can come after the req
scripts/competitor-scraper.py, line 86
"""requests.get with redirects followed by hand, so every hop is checked
Secrets
Concern
reads a credential or environment file.
SECRETS_ENV_READ SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
scripts/ai-visibility-checker.py, line 165
openai_key = os.environ.get("OPENAI_API_KEY")
scripts/ai-visibility-checker.py, line 205
anthropic_key = os.environ.get("ANTHROPIC_API_KEY")
.gitignore, line 32
credentials.json
Show more
scripts/refresh_models.py, line 53
key = os.environ.get("ANTHROPIC_API_KEY")
scripts/refresh_models.py, line 66
key = os.environ.get("OPENAI_API_KEY")
scripts/refresh_models.py, line 79
key = os.environ.get("GEMINI_API_KEY")
scripts/refresh_models.py, line 96
key = os.environ.get("EVOLINK_API_KEY")
.gitignore, line 26
# Environment
.gitignore, line 27
.env
.gitignore, line 29
*.env
docs/competitor-intelligence.md, line 333
AI visibility is an emerging dimension. The plugin uses the AEO/GEO module's frameworks to assess this. If you have AI visibility checking enabled (requires OpenAI or Anthropic API
docs/competitor-intelligence.md, line 483
**SEMrush MCP** (requires `SEMRUSH_API_KEY` in `.env`; no verified MCP package exists --- wire it via `/digital-marketing-pro:add-integration` or an aggregator):
docs/competitor-intelligence.md, line 490
**Ahrefs MCP** (requires `AHREFS_API_KEY` in `.env`):
docs/getting-started.md, line 626
- **AI visibility checking** --- programmatic checks of how your brand appears in AI answer engines (requires OpenAI or Anthropic API key in `.env`)
Agent instructions
Pass
No instruction to ignore earlier instructions or to hide a step.
Obfuscation
Note
a file was over the read cap and was not fully read. the file cap was reached before every file was read.
OBFUSCATION_FILE_OVER_READ_CAP OBFUSCATION_FILE_CAP_REACHED
CHANGELOG.md, line 1
# Changelog
skills/context-engine/30-60-90-framework.md, line 1
# The 30 / 60 / 90-Day Framework
Licence
Pass
A licence file is present (LICENSE).
Maintainer activity
Pass
The latest commit is within the last 365 days.
Note
Hygiene check of commit dd65250cfe4e. can delete files. accepts a host from input, with no fixed list in this file. reads a credential or environment file. a file was over the read cap and was not fully read. the file cap was reached before every file was read.
Date and source
Date checked:
github.com
Commit graded: dd65250cfe4ed98ab46b84f40b6b57eae87cf0e8
This link goes to the original host. PlugVet does not host or check what you download from there, and installing it is your own decision and risk.