claude-monitor
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill automatically downloads the 'psutil' library from the Python Package Index (PyPI) if it is missing from the environment. PyPI is a standard and well-known service for Python dependencies.
- [COMMAND_EXECUTION]: The diagnostic scripts use 'subprocess.check_call' to execute 'pip install' commands. This represents automated environment modification without explicit user confirmation of the shell command.
- [DYNAMIC_EXECUTION]: Runtime installation of dependencies is performed using shell commands, which is a form of dynamic environment configuration.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted system data, creating an attack surface for indirect prompt injection. 1. Ingestion points: Local process names and network error messages are collected in 'scripts/health_check.py' and 'scripts/monitor.py'. 2. Boundary markers: None. 3. Capability inventory: The skill can execute shell commands ('pip') and write files to the local file system. 4. Sanitization: Process names are included in summaries without escaping or filtering.
- [DATA_EXFILTRATION]: The skill performs network connectivity and latency tests targeting 'api.anthropic.com' and '8.8.8.8' (Google DNS). These operations are used to diagnose connectivity issues and target well-known, trusted service endpoints.
Audit Metadata