claude-codex-usage-dashboard

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The Quick Start instructs cloning and running remote code (git clone https://github.com/frankchiu-dev/claude-codex-usage-dashboard.git followed by node server.js), so the skill fetches and executes repository code from that URL at install/runtime.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.70). Flagged because the skill includes commands that modify system configuration (Windows netsh firewall rules, installing autostart LaunchAgent, and an example using PowerShell ExecutionPolicy Bypass), which alter the machine's state and may require elevated privileges or bypass security controls.