Is LeoLin990405/claude-ccb-skills safe?
No. LeoLin990405/claude-ccb-skills is dangerous to install. Oathe's behavioral security audit gave the claude-ccb-skills skill by LeoLin990405 a trust score of 39/100 with 6 findings (1 critical, 2 high).
https://github.com/LeoLin990405/claude-ccb-skills
Is LeoLin990405/claude-ccb-skills safe to install?
This skill enables arbitrary bash command execution through multiple delegation interfaces with no input validation. The complex multi-AI orchestration system could manipulate agent behavior and hide malicious activities through background execution.
What security issues were found in LeoLin990405/claude-ccb-skills?
Category Scores
Findings (6)
CRITICAL Arbitrary Bash Command Execution -60 ▶
Multiple skills (cask, gask, oask, etc.) execute bash commands with unsanitized user input via $ARGUMENTS parameter. This enables arbitrary code execution.
HIGH Agent Behavior Manipulation -35 ▶
The stem-modeling skill contains over 10,000 lines of instructions for complex multi-AI orchestration that could override normal Claude behavior patterns and suppress security checks.
HIGH Command Injection Attack Vector -50 ▶
The skill design enables command injection where malicious bash commands can be hidden within legitimate AI delegation requests.
MEDIUM Security Check Bypass -25 ▶
Skills instruct agent to 'end turn immediately' and use background execution, potentially bypassing security monitoring and user oversight.
MEDIUM Sensitive File Access Capability -25 ▶
Bash execution capabilities could be exploited to access sensitive files like credentials, SSH keys, and environment variables.
MEDIUM System Compromise Potential -30 ▶
The ccb-launcher skill contains instructions to modify system environment and launch external programs, enabling potential system compromise.
Should I install LeoLin990405/claude-ccb-skills?
Oathe's verdict for LeoLin990405/claude-ccb-skills is DANGEROUS with a trust score of 39/100. Recommendation: Do not install.