cco-config
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
Bashtool to execute a local Node.js script (node src/config.js) to manage settings. This command execution is scoped to the skill's own directory and a specific configuration file. - [INDIRECT_PROMPT_INJECTION]: The skill features a data ingestion surface as it processes configuration data.
- Ingestion points: Data is read from
~/.claude-context-optimizer/config.jsonwhen theshoworgetcommands are executed via theBashtool. - Boundary markers: The instructions do not define specific delimiters or warnings for the agent to treat the configuration file's content as untrusted.
- Capability inventory: The skill can execute local commands via
Bashand has the ability to read and write to the local filesystem. - Sanitization: The skill description specifies that behavior knobs are "range-validated" and that the script handles errors for bad values or unknown keys, which acts as a safeguard against malicious or malformed input.
Audit Metadata