claude-health
Pass
Audited by Gen Agent Trust Hub on Aug 24, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
Bashto execute file system inspection and maintenance commands includingls,find,wc,du,rm, andgit hash-object. These tools are used for diagnostic purposes such as identifying junk files for removal, calculating cache size, and verifying file integrity via hashing. - [DATA_EXPOSURE_AND_EXFILTRATION]: The skill reads local configuration files, including
settings.jsonandsettings.local.json, to verify hook entry integrity and path formatting. This access is necessary for the health check functionality and is confined to the local environment, with no network-capable tools permitted in the skill'sallowed-toolsconfiguration. - [INDIRECT_PROMPT_INJECTION]: The skill processes multiple repository files (rules, hooks, scripts, and READMEs) to perform consistency and integrity checks, which identifies a surface for indirect prompt injection. 1. Ingestion points: Files located in
.claude/rules/,.claude/hooks/,.claude/scripts/, and.claude/skills/. 2. Boundary markers: Absent; the skill does not use specific delimiters or warnings to isolate ingested file content from the audit logic. 3. Capability inventory: The skill has access toBashandReadtools. 4. Sanitization: Absent; the skill reads raw file contents to perform hashing and structural validation.
Audit Metadata