configure-ecc
Pass
Audited by Gen Agent Trust Hub on Aug 25, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill clones a repository from GitHub (
https://github.com/affaan-m/everything-claude-code.git) into the/tmpdirectory. This is the intended behavior for an installer skill to fetch the source components before installation.- [COMMAND_EXECUTION]: The skill executes several shell commands to manage the installation process, includingrm,mkdir,cp,ls, andgrep. These are used for standard file system operations like creating directories, copying skills/rules to target paths, and verifying installation integrity.- [COMMAND_EXECUTION]: The skill usesgit cloneto retrieve the project repository. If the clone fails, it prompts the user to provide a local path, ensuring the process remains interactive and under user control.- [COMMAND_EXECUTION]: The skill performs in-place editing of the installed markdown files (SKILL.md) to adjust paths and remove irrelevant sections based on user preferences. These modifications are explicitly restricted to the installation target (~/.claudeor.claude) and not the source repository.
Audit Metadata