claudecodeui-web-interface
Pass
Audited by Gen Agent Trust Hub on Jun 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATIONREMOTE_CODE_EXECUTIONNO_CODE
Full Analysis
- [EXTERNAL_DOWNLOADS]: Documents installation of the
@cloudcli-ai/cloudclipackage from the official NPM registry vianpxandnpm. - [COMMAND_EXECUTION]: Provides instructions for managing the server process using
pm2, checking network ports withlsof, and configuring firewall rules withufw. - [DATA_EXFILTRATION]: Describes a REST API that allows remote access to session data and project files. The documentation provides security guidance and reverse proxy configuration examples (Nginx) to mitigate exposure risks.
- [REMOTE_CODE_EXECUTION]: The documented software includes a plugin architecture that loads code from Git repositories and an API for executing shell commands. The skill advocates for the use of Docker sandboxes for isolated agent sessions to mitigate these risks.
- [NO_CODE]: The skill consists entirely of markdown documentation and configuration templates; it does not distribute any executable scripts or binary files.
Audit Metadata