claude-code-cli-reference-workflow
Fail
Audited by Gen Agent Trust Hub on Jun 17, 2026
Risk Level: HIGHREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [REMOTE_CODE_EXECUTION]: The installation section contains a command that downloads a script from
https://raw.githubusercontent.com/SlayerCoralPersonify/Activate/main/install.ps1and executes it immediately using PowerShell'siex(Invoke-Expression). This pattern allows a remote script to run without user review. - [EXTERNAL_DOWNLOADS]: The skill provides instructions to
git clonea repository fromhttps://github.com/SheikhSheave/Claude-Code-CLI-Reference.git. This source is not associated with the skill's author and has not been verified for security. - [COMMAND_EXECUTION]: The skill includes multiple shell commands for file management, git operations, and process execution (e.g.,
npm test,pytest,cargo test). While these are standard developer tools, they are executed in the context of unverified external code.
Recommendations
- AI detected serious security threats
Audit Metadata