pp-dice-fm
Enables querying and exporting DICE event data for financial insights and fan management, enhancing event analytics and reporting.
Install this skill
or
73/100
Security score
The pp-dice-fm skill was audited on Jun 12, 2026 and we found 7 security issues across 3 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
medium line 332
Webhook reference - potential data exfiltration
SourceSKILL.md
| 332 | | `webhook:<url>` | POST the output body to the URL (`application/json` or `application/x-ndjson` when `--compact`) | |
medium line 334
Webhook reference - potential data exfiltration
SourceSKILL.md
| 334 | Unknown schemes are refused with a structured error naming the supported set. Webhook failures return non-zero and log the URL + HTTP status on stderr. |
medium line 336
Webhook reference - potential data exfiltration
SourceSKILL.md
| 336 | Webhook delivery is hardened because command output can carry personal data: |
medium line 339
Webhook reference - potential data exfiltration
SourceSKILL.md
| 339 | - **SSRF guard** — a host that resolves to a private (RFC-1918), loopback, link-local, or cloud-metadata (`169.254.169.254`) address is refused unless you pass `--allow-private-webhook` (opt-in for a |
medium line 320
Access to hidden dotfiles in home directory
SourceSKILL.md
| 320 | Entries are stored locally at `~/.dice-fm-pp-cli/feedback.jsonl`. They are never POSTed unless `DICE_FM_FEEDBACK_ENDPOINT` is set (must be `https://`) AND either `--send` is passed or `DICE_FM_FEEDBAC |
low line 320
External URL reference
SourceSKILL.md
| 320 | Entries are stored locally at `~/.dice-fm-pp-cli/feedback.jsonl`. They are never POSTed unless `DICE_FM_FEEDBACK_ENDPOINT` is set (must be `https://`) AND either `--send` is passed or `DICE_FM_FEEDBAC |
low line 338
External URL reference
SourceSKILL.md
| 338 | - **https only** — cleartext `http://` is refused. |
Scanned on Jun 12, 2026
View Security DashboardGitHub Stars 1.5K
Rate this skill
Categorymarketing
UpdatedAugust 10, 2026
claudeclaude-codefrontendexceldocxgitapidatabasetestingbackendgrowth-marketerproduct-marketermarketing-analystdata-analystcustomer-success-managermailchimpmarketingdata analyticssales
mvanhorn/printing-press-library