cco-doctor
Pass
Audited by Gen Agent Trust Hub on May 9, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a local Node.js script
doctor.jslocated within the plugin's root directory to perform environment checks. This script is part of the vendor's package. - [DATA_EXFILTRATION]: The skill verifies the existence and readability of files within the
~/.claude-context-optimizer/directory andpackage.json. These actions are restricted to the plugin's own operational data and do not involve unauthorized access to sensitive system information or external transmission. - [PROMPT_INJECTION]: The skill processes the output of the
doctor.jsscript to inform the user of the plugin's status. - Ingestion points: Tool output from the
node ${CLAUDE_PLUGIN_ROOT}/src/doctor.jscommand. - Boundary markers: Absent; the agent is instructed to translate the output directly.
- Capability inventory: The skill is allowed to use
Bashfor execution andReadfor file verification. - Sanitization: No specific sanitization or escaping is applied to the script's output before it is processed by the agent.
Audit Metadata