configure-ecc
Warn
Audited by Gen Agent Trust Hub on Aug 5, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill clones content from a remote repository at
https://github.com/loulanyue/awesome-claude-notes.gitinto the/tmpdirectory during its setup process. - [REMOTE_CODE_EXECUTION]: It installs the downloaded files directly into the agent's skill directory (
~/.claude/skills/). Because agent skills consist of instructions and potential scripts that the AI executes, this mechanism allows remote content from the repository to define future agent behaviors and capabilities. - [COMMAND_EXECUTION]: The installer performs several file system operations using powerful shell commands, including recursive deletion (
rm -rf), directory creation (mkdir -p), and recursive copying (cp -r) within sensitive paths like the user's home configuration directory (~/.claude/).
Audit Metadata