cc-connect
Pass
Audited by Gen Agent Trust Hub on Jul 7, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install a legitimate utility 'cc-connect' via npm and provides links to its official GitHub repository ('github.com/chenhg5/cc-connect'). These are standard development practices.
- [COMMAND_EXECUTION]: Provides documentation for using a command-line tool ('cc-connect init', 'cc-connect start') to manage the bridge. All commands are user-initiated and related to the skill's primary function.
- [CREDENTIALS_UNSAFE]: The documentation includes example placeholders for bot tokens (e.g., '7284619035:AAF-kLm9xPqR...', 'xoxb-8234567890-...') which are used for demonstration purposes. It correctly advises users to manage their own tokens securely in configuration files.
- [DATA_EXFILTRATION]: While the skill's purpose is to move data between a local environment and messaging platforms, it includes built-in security recommendations such as 'allowed_users' and 'allowed_channels' to prevent unauthorized access or accidental data exposure.
Audit Metadata