CategoryWeightCategory scoreContribution

Securityprompt, exec, net, exfil, eval

35%

0.0 pts

Supply chainhash, typosquat, maintainer, lockfile

20%

100

20.0 pts

Maintenancestaleness, pinning, CI

15%

100

15.0 pts

TransparencySKILL.md, perms, README

15%

100

15.0 pts

Communityinstalls, verify, response

15%

100

15.0 pts

Findings & checks · 12 flagged

Securityscore 0 · 12 findings

MEDIUMInstruction telling the agent not to ask for approvalSS-SKILL-INJECT-DONT-ASK-01 · Prompt injection · CHANGELOG.md×12

MEDIUM — it fires on intent; the real damage depends on the host agent's own approval-gating.

Why it matters

The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.

The exact value spotted

excerptCHANGELOG.md· markdown

1957- Fixed dismissing a row (x) in `/artifacts` unlinking its file from the artifact, so publis

… (70 chars elided on L1957)

1958- Fixed Artifact tool publishes after a conversation rewind (Esc Esc) overwriting a file's n

… (108 chars elided on L1958)

1959- Fixed an `Artifact` allow rule ("don't ask again") letting the Artifact tool publish a fil

… (108 chars elided on L1959)

1960- Fixed `/cost` and SDK `modelUsage` reporting a turn under the wrong model when the server

… (75 chars elided on L1960)

1961- Fixed the Artifact tool so that publishing a page no longer lets Claude overwrite its sour

… (100 chars elided on L1961)

Occurrences

12 occurrences · first at L1959, also L3306, L3659 +9 more

Show all 12 locations

Line

File

L1959

CHANGELOG.md

L3306

CHANGELOG.md

L3659

CHANGELOG.md

L3960

CHANGELOG.md

L4122

CHANGELOG.md

L4206

CHANGELOG.md

L4206

CHANGELOG.md

L5909

CHANGELOG.md

L5923

CHANGELOG.md

L6581

CHANGELOG.md

L7525

CHANGELOG.md

L8612

CHANGELOG.md

How to fix

Remove the approval-skipping instruction, or scope it narrowly to a specific safe, reversible action.

Delete blanket "don't ask / no need to confirm" directives from the skill.
If the skill is a genuine autonomous job, restrict the opt-out to a named non-destructive action rather than all actions.

Framework references

OWASPLLM01 ATLASAML.T0051

Trace & refs

ruleSS-SKILL-INJECT-DONT-ASK-01sha256ce5204b52388d24f…rubric 365aacaView on GitHub

Supply chainscore 100 · 0 findings

✓—All supply chain checks passedNo findings in this category for the latest scan.pass

Maintenancescore 100 · 0 findings

✓—All maintenance checks passedNo findings in this category for the latest scan.pass

Transparencyscore 100 · 0 findings

✓—All transparency checks passedNo findings in this category for the latest scan.pass

Communityscore 100 · 0 findings

✓—All community checks passedNo findings in this category for the latest scan.pass

The primary manifest — the file an agent reads to learn what this artifact does.

README.md · 1 file

README.md2.8 KB · Markdown

Claude Code

[![npm]](https://www.npmjs.com/package/@anthropic-ai/claude-code)

[npm]: https://img.shields.io/npm/v/@anthropic-ai/claude-code.svg?style=flat-square

Claude Code is an agentic coding tool that lives in your terminal, understands your codebase, and helps you code faster by executing routine tasks, explaining complex code, and handling git workflows -- all through natural language commands. Use it in your terminal, IDE, or tag @claude on Github.

Learn more in the [official documentation](https://code.claude.com/docs/en/overview).

Get started

[!NOTE] Installation via npm is deprecated. Use one of the recommended methods below.

For more installation options, uninstall steps, and troubleshooting, see the setup documentation.

Install Claude Code:

MacOS/Linux (Recommended):

    curl -fsSL https://claude.ai/install.sh | bash

Homebrew (MacOS/Linux):

    brew install --cask claude-code

Windows (Recommended):

    irm https://claude.ai/install.ps1 | iex

WinGet (Windows):

    winget install Anthropic.ClaudeCode

NPM (Deprecated):

    npm install -g @anthropic-ai/claude-code

Navigate to your project directory and run claude.

Plugins

Anthropic's Claude Code plugins are developed in claude-plugins-official. See the plugins directory for more about plugins.

Reporting Bugs

We welcome your feedback. Use the /bug command to report issues directly within Claude Code, or file a GitHub issue.

Connect on Discord

Join the Claude Developers Discord to connect with other developers using Claude Code. Get help, share feedback, and discuss your projects with the community.

Data collection, usage, and retention

When you use Claude Code, we collect feedback, which includes usage data (such as code acceptance or rejections), associated conversation data, and user feedback submitted via the /bug command.

How we use your data

See our data usage policies.

Privacy safeguards

We have implemented several safeguards to protect your data, including limited retention periods for sensitive information, restricted access to user session data, and clear policies against using feedback for model training.

For full details, please review our Commercial Terms of Service and Privacy Policy.

Claude Code— plugin

Is Claude Code safe to install?

Claude Code

Get started

Plugins

Reporting Bugs

Connect on Discord

Data collection, usage, and retention

How we use your data

Privacy safeguards

Audit the pieces. Scan the whole. Decide.