laohan-jiaocheng
Warn
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONPERSISTENCEPRIVILEGE_ESCALATIONREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill generates and executes multiple scripts (Bash, Python, and PowerShell) to perform environment checks, modify JSON configuration files, and automate installation steps for tools like Chrome and Claude.
- [PERSISTENCE]: The tutorial for
claude-memincludes the creation of a macOSlaunchdagent (~/Library/LaunchAgents/com.claude-mem.litellm.plist) to ensure the LiteLLM proxy service automatically starts at login and stays running in the background. - [PRIVILEGE_ESCALATION]: The Chrome Gemini fix tutorial instructs Windows users to run PowerShell as an Administrator and uses
Stop-Process -Force. Additionally, the macOS scripts utilizechmod +xto make generated files executable. - [REMOTE_CODE_EXECUTION]: The environment check script in
references/claude-mem-litellm.mdsuggests installing the Bun runtime using a piped remote shell script:curl -fsSL https://bun.sh/install | bash. - [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of several external tools and plugins from various third-party GitHub repositories (e.g.,
thedotmack/claude-mem,BerriAI/litellm,affaan-m/everything-claude-code) that are not part of a pre-verified trusted vendor list. - [DATA_EXPOSURE]: The scripts access and modify sensitive local configuration files, including Claude Code's
settings.jsonand Chrome'sLocal State, which contain user preferences, flags, and internal application identifiers. - [DYNAMIC_EXECUTION]: The skill uses
sedto perform in-place patching of a local JavaScript file (worker-service.cjs) within theclaude-memplugin directory to redirect hardcoded API endpoints to a local proxy.
Audit Metadata