cco-report

Pass

Audited by Gen Agent Trust Hub on Mar 23, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill executes local scripts (report.js and tracker.js) located within the ${CLAUDE_PLUGIN_ROOT} directory. These scripts are part of the skill package and do not perform any remote operations or unauthorized data access. The use of $(pwd) as an argument is a standard practice for project-specific analysis tools. No prompt injections, exfiltration patterns, or obfuscation techniques were detected.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 23, 2026, 11:23 AM