Skills
skills/bfly123/claude_code_bridge/cping/Gen Agent Trust Hub

cping

Fail

Audited by Gen Agent Trust Hub on Mar 8, 2026

Risk Level: HIGHCOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses shell interpolation to execute commands in both Bash and PowerShell environments. User-supplied variables $PROVIDER and $ARGUMENTS are placed directly into the command string ccb-ping $PROVIDER and ccb-ping $ARGUMENTS. An attacker can use shell metacharacters such as semicolons, pipes, or backticks (e.g., gemini; rm -rf /) to execute arbitrary commands on the host system with the agent's privileges.
Recommendations
  • AI detected serious security threats
Audit Metadata
Risk Level
HIGH
Analyzed
Mar 8, 2026, 06:11 AM