rekooh-cc
Pass
Audited by Gen Agent Trust Hub on Nov 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides utility scripts (
inspect-project.ts,patch-settings.ts,validate-hooks.ts) for managing Claude Code hook configurations. These scripts are intended to be executed via Bun to read and modify local.claude/settings.jsonfiles and verify the presence of hook scripts. - [EXTERNAL_DOWNLOADS]: The
check-official-links.tsscript performs network operations tocode.claude.comandgithub.comto verify reference documentation links. These operations use the HTTPHEADmethod to check URL status without downloading or executing content bodies. - [INDIRECT_PROMPT_INJECTION]: The skill possesses an attack surface for indirect injection by ingesting data from the local environment, such as
package.json,.claude/settings.json, and directory listings. This information is processed by scripts and returned to the agent context. - Ingestion points:
scripts/inspect-project.tsreads repository configuration files and file system metadata. - Boundary markers: No specific delimiters are used in script outputs beyond standard JSON formatting.
- Capability inventory: The skill is capable of reading local files and writing to the
.claude/settings.jsonconfiguration file. - Sanitization: Ingested content is handled using standard JSON parsing (
JSON.parse).
Audit Metadata