cco-digest
Warn
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: MEDIUMCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute a shell command that directly interpolates user-provided arguments:
node ${CLAUDE_PLUGIN_ROOT}/src/digest.js $ARGUMENTS. This pattern is susceptible to command injection vulnerabilities. If the user input is not properly sanitized or escaped by the agent platform, an attacker could supply input containing shell metacharacters (such as;,&&, or|) to execute arbitrary commands on the underlying system.
Audit Metadata