cc-monitor-tool

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 0.90). The Monitor tool intentionally streams file and process output into the conversation (potentially sending sensitive data to the remote service) and supports autonomous code edits and pushes, creating a high risk of data exfiltration and unauthorized code modification.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The Monitor tool tails user-selected runtime outputs (e.g., server.log, CI failure output, dev-server stdout/stderr) by spawning a background watcher and streaming new transcript messages into Claude, which can include outsider-authored free text written into those monitored logs/jobs.