Skills
Navigate
skills/bcoaracy/ragdata/strategic-compact/Gen Agent Trust Hub

strategic-compact

Warn

Audited by Gen Agent Trust Hub on Jun 22, 2026

Risk Level: MEDIUMREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The skill documentation in SKILL.md guides users to modify their local configuration file at ~/.claude/settings.json to execute a JavaScript file named suggest-compact.js. As this file is missing from the skill package, its behavior is unverifiable and could execute arbitrary malicious code.
  • [COMMAND_EXECUTION]: The skill sets up persistent execution of shell commands through the use of PreToolUse hooks. These hooks trigger a local Node.js execution on every 'Edit' or 'Write' tool invocation, leading to continuous command execution without user oversight for every tool call.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Jun 22, 2026, 01:42 PM