skills/npow/claude-skills/ccr-models/Gen Agent Trust Hub

ccr-models

Pass

Audited by Gen Agent Trust Hub on Oct 3, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes a shell command involving curl to query a local API endpoint at 127.0.0.1:3456. This is used to retrieve status information from the claude-code-router tool provided by the same author.
  • [COMMAND_EXECUTION]: The skill pipes the output of the network request into python3 -c to execute an embedded script. The Python code is static and used exclusively for parsing and filtering JSON data for display purposes. While this pattern was flagged by automated scanners, the data source is restricted to the local loopback address, and the execution logic is hardcoded within the skill rather than fetched from a remote server.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 3, 2026, 08:42 PM