clodex
Fail
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: HIGHEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTIONPRIVILEGE_ESCALATIONPERSISTENCE
Full Analysis
- [DYNAMIC_EXECUTION]: The skill performs binary patching of the Claude Code executable via the 'clodex patch' command to modify internal application behavior.
- [DYNAMIC_EXECUTION]: The documentation highlights a 'local patches' feature ('~/.clodex/local-patches.mjs') that allows the execution of custom JavaScript code with full user permissions.
- [EXTERNAL_DOWNLOADS]: The skill installs the '@bman654/clodex' package globally from the npm registry.
- [COMMAND_EXECUTION]: Numerous shell commands are used for system configuration, software installation, and binary modification, including 'npm', 'jq', and 'clodex'.
- [PRIVILEGE_ESCALATION]: Binary modification and global software installation are high-impact operations that can affect the security boundary of the host environment.
- [PERSISTENCE]: The modifications made by the patching process are persistent changes to the application binary that last across sessions.
Recommendations
- AI detected serious security threats
Audit Metadata