claude-devtools-inspector
Warn
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONCREDENTIALS_UNSAFEPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill directs the user to download and install third-party software from a non-trusted repository (
github.com/matt1398/claude-devtools). - [COMMAND_EXECUTION]: Provides instructions to execute installation and build commands including
brew install,pnpm install, anddocker build, which allow for software installation and execution from external sources. - [CREDENTIALS_UNSAFE]: The tool is configured to automatically read sensitive system files including
~/.ssh/configand references private SSH keys (~/.ssh/id_rsa) for remote session inspection. - [PRIVILEGE_ESCALATION]: Includes specific instructions to bypass macOS Gatekeeper security protections using the
xattr -d com.apple.quarantinecommand on the downloaded application. - [INDIRECT_PROMPT_INJECTION]: The skill possesses an attack surface for indirect prompt injection by processing external session logs.
- Ingestion points:
~/.claude/sessions/(JSONL session logs) - Boundary markers: None identified in the provided instructions
- Capability inventory:
brew,pnpm,docker,xattr, file read/write operations - Sanitization: No explicit sanitization or filtering of log content described
Audit Metadata