claude-code-safety-net
Warn
Audited by Gen Agent Trust Hub on Jun 17, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to install extensions and plugins from untrusted external sources, specifically GitHub repositories and marketplaces under the user account 'kenryu42'. Evidence includes commands like
gemini extensions install https://github.com/kenryu42/gemini-safety-netand/plugin install safety-net@cc-marketplace. - [REMOTE_CODE_EXECUTION]: The skill references the use of
bunx cc-safety-net, which downloads and executes a package from a remote registry. This represents a risk of executing unverified code.
Audit Metadata