acommons
Fail
Audited by Gen Agent Trust Hub on Apr 18, 2026
Risk Level: HIGHCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill installs OS-level persistence to run background tasks automatically. This includes creating hourly scheduled tasks via
schtaskson Windows, addingLaunchAgentsplist files on macOS, and modifyingcrontabon Linux. - [COMMAND_EXECUTION]: The
setupscript modifies the internal configuration of the Claude Code agent (~/.claude/settings.json) to inject a custom 'Stop' hook that executes the skill's monitoring script every time the agent finishes a session. - [DATA_EXFILTRATION]: The skill collects and transmits sensitive AI usage telemetry and device identity information to an external endpoint (
https://api.agenticcommons.xyz/v1/usage/daily). The data includes token counts, model names, and system metadata such as hostname, CPU profile, and OS version. - [DATA_EXFILTRATION]: The collection scripts automatically read and parse private local data sources, including Claude Code statistics, Codex session JSONL logs, Gemini session files, and OpenCode SQLite databases, to extract usage metadata.
- [COMMAND_EXECUTION]: The skill utilizes
spawnto execute PowerShell command strings on Windows systems for the purpose of decrypting saved access tokens.
Recommendations
- AI detected serious security threats
Audit Metadata