claude-code-agent-monitor

SUSPICIOUS: The skill’s behavior mostly matches its stated monitoring purpose, but trust is weakened by the publisher/repo-owner mismatch and by forwarding detailed Claude Code activity to a configurable endpoint over unauthenticated HTTP by default. Main risk is privacy/data exposure and moderate supply-chain trust, not confirmed malware.