pp-dice-fm
Warn
Audited by Gen Agent Trust Hub on Jul 12, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATIONREMOTE_CODE_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to download and install the CLI tool and MCP server from the author's NPM organization (@mvanhorn) and GitHub repository (github.com/mvanhorn/printing-press-library).
- [COMMAND_EXECUTION]: The skill's primary function is to execute a local binary,
dice-fm-pp-cli, to query, process, and analyze DICE.fm event and audience data. - [DATA_EXFILTRATION]: The tool includes a
--deliver webhook:<url>feature that allows sending command output—which may contain fan contact details, revenue data, and other sensitive event information—to external HTTPS endpoints. - [REMOTE_CODE_EXECUTION]: The
normalizecommand supports a--classifier-cmd <path>flag, allowing the tool to execute arbitrary external programs as subprocesses for data classification tasks.
Audit Metadata