ccr-models
Pass
Audited by Gen Agent Trust Hub on Oct 3, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a shell command involving
curlto query a local API endpoint at127.0.0.1:3456. This is used to retrieve status information from theclaude-code-routertool provided by the same author. - [COMMAND_EXECUTION]: The skill pipes the output of the network request into
python3 -cto execute an embedded script. The Python code is static and used exclusively for parsing and filtering JSON data for display purposes. While this pattern was flagged by automated scanners, the data source is restricted to the local loopback address, and the execution logic is hardcoded within the skill rather than fetched from a remote server.
Audit Metadata