claude-code-plugin-hacker
Warn
Audited by Gen Agent Trust Hub on May 15, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: Performs broad filesystem operations on the
~/.claudedirectory, including recursive searches (find), permission modifications (chmod +x), string replacement in scripts (sed), and file deletions (rm -rf) to audit and fix plugin issues. - [REMOTE_CODE_EXECUTION]: Uses
evalto execute command strings extracted fromhooks.jsonfiles during the verification phase. This constitutes dynamic execution of commands defined in external plugin configurations, which may be modified or untrusted. - [DATA_EXFILTRATION]: Accesses sensitive configuration and metadata files, including
~/.claude/settings.jsonandhooks.jsonfiles within the plugin cache, to audit plugin states and hook definitions.
Audit Metadata