setup-claude-code
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill's primary function is to establish security guardrails for the Claude Code environment by configuring permissions and installing a PreToolUse hook.
- [SAFE]: The permissions profile for host and sandbox modes includes comprehensive deny-lists for sensitive data locations such as SSH keys, AWS credentials, environment files, and shell history.
- [SAFE]: The included block-dangerous-bash.sh script provides proactive protection against destructive commands, including recursive removals outside the current working directory, unauthorized git pushes to protected branches, and mutating GitHub CLI operations.
- [SAFE]: The installation workflow utilizes standard shell operations for file management and script execution, including backups of existing configurations and explicit user confirmation steps.
- [SAFE]: The optional statusline.sh script is a localized UI enhancement that aggregates environment metadata for display purposes within the agent interface.
Audit Metadata