Caveat verdict

claude-code-assist

cc-helper

88
🟢 Trusted
No high-risk patterns surfaced by the deep scan — automated capability review, not behavioral proof.

Claude Code setup assistant for Chinese developers that guides environment checks, CLI installation, and provider configuration (ANTHROPIC_BASE_URL routing); no exfiltration or deception, credential handling is user-controlled.

⚠ Flagged for review — coarse, uncorroborated signal, not a confirmed exploit. Review the config yourself before installing.

Automated static analysis — not a human review. Caveat flags capabilities, not confirmed intent, and can produce false positives. Disagree with this verdict? Use Dispute below.

0
security
50
transparency
90
maintenance

Permission integrity

Code accesses API keys/tokens but declares no environment variables

credential_access

Accesses agent memory/configuration files

agent_memory

Findings (8)

Pattern match critical

Possible hardcoded credential

SKILL.md · code · TOKEN="你的API-Key

Pattern match critical

Command substitution with curl — remote code execution

references/install-guide.md · code · bash -c "$(curl

Pattern match critical

Pipe-to-shell pattern (curl | sh) — supply chain attack vector

references/install-guide.md · code · curl -o- https://raw.githubusercontent.com/nvm-sh/nvm/v0.40.1/install.sh | bash

Pattern match critical

Pipe to bash — executes piped content as shell commands

references/install-guide.md · code · | bash

Pattern match critical

Recursive delete from root or home — destructive command

references/troubleshooting.md · code · rm -rf ~

Pattern match high

References sudo — requests elevated privileges

references/install-guide.md · code · sudo

Pattern match high

Accesses shell history/config

references/install-guide.md · code · ~/.zshrc

Pattern match medium

HTTP request to bare IP address — common in malicious payloads

references/troubleshooting.md · prose · downgraded · http://127.0.0.1

Why the tier is capped

Execution sink present in raw bytes (Hard Floor: class A/C). Final tier capped at Caution — cannot be lifted by any downgrade, example-payload opt-in, or allowlist.

Permissions & capabilities

No declared permissions — minimal attack surface.

agent_memorycredential_access

Is this flag fair?

Check another skill Browse the registry Auditing your own skills or configs? Use the API