claude-local-reset
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill performs read-only HTTPS requests to the well-known service
ipinfo.ioto determine the terminal's exit IP and geographic metadata. This behavior is consistent with the skill's auditing purpose and involves no untrusted code execution. - [COMMAND_EXECUTION]: The skill executes local system utilities (such as
ps,scutil,npm,git, andcurl) via Python'ssubprocessmodule to inspect running processes and environment configurations. The arguments are controlled and specific to gathering audit data for Claude applications. - [INDIRECT_PROMPT_INJECTION]: The skill exposes an ingestion surface by reading and reporting on content from external network auditing websites (e.g., IPLeak, BrowserLeaks). 1. Ingestion points: Data is read from external audit pages as described in
references/browser-and-report.md. 2. Boundary markers: The skill uses absolute path variables (e.g.,SKILL_DIR). 3. Capability inventory: The skill performs file moves/writes, local command execution, and local browser operations. 4. Sanitization: Theclaude_check_report.pyscript employshtml.escapeand IP masking, whileclaude_network_check.pyincludes logic to redact detected secrets and credentials from shell profiles and environment variables.
Audit Metadata