pp-metacritic

Pass

Audited by Gen Agent Trust Hub on Jul 20, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill fetches installation packages for the metacritic-pp-cli and metacritic-pp-mcp tools from the developer's official npm scope (@mvanhorn) and GitHub repository (github.com/mvanhorn).\n- [REMOTE_CODE_EXECUTION]: Installation instructions utilize npx and go install to download and set up the CLI and MCP server components directly from remote sources provided by the author.\n- [COMMAND_EXECUTION]: The skill requires the use of the Bash tool to execute the installed metacritic-pp-cli and metacritic-pp-mcp binaries for API querying, search, and configuration tasks.\n- [DATA_EXFILTRATION]: The CLI includes functionality to route command output to external URLs via a --deliver webhook:<url> parameter and can optionally transmit local feedback data to a remote endpoint if the METACRITIC_FEEDBACK_ENDPOINT environment variable is configured by the user.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 20, 2026, 10:59 PM
Security Audit — agent-trust-hub — pp-metacritic