claude-code — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited claude-code (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Bundled commands use $PLUGIN_ROOT ($env:PLUGIN_ROOT in PowerShell; same path suffix) for the plugin root. Set it once: use the host's plugin-root variable when defined (Claude Code: PLUGIN_ROOT="$CLAUDE_PLUGIN_ROOT"), otherwise the absolute path of this plugin's root directory.
Use this skill when the user asks to operate, diagnose, automate, wrap, or explain Claude Code CLI, including claude, claude --print, claude plugin, claude mcp, claude agents, claude doctor, claude auto-mode, worktrees, hooks, settings, permissions, custom agents, or ultrareview.
For the full command/safety matrix, read $PLUGIN_ROOT/references/cli-operation-contracts.md.
Prefer live local facts over memory. Inspect the installed CLI before building commands or debugging version-sensitive behavior:
python3 "$PLUGIN_ROOT/scripts/claude_code_inspector.py" --jsonIf the user supplies a Claude executable path, use it for the current run:
python3 "$PLUGIN_ROOT/scripts/claude_code_inspector.py" --claude "$CLAUDE_CLI_PATH" --jsonDo not commit personal absolute paths into source files, manifests, docs, or examples. Use CLAUDE_CLI, PATH, ANTHROPIC_API_KEY, or user-provided runtime arguments instead.
--print, JSON/stream-json, JSON schema, input streaming, prompt files/stdin, budget caps, fallback model, and no-persistence runs: use claude-print-automation.--plugin-dir or --plugin-url, and MCP server lifecycle: use claude-plugin-mcp-manager.claude-doctor-debugger.claude agents --json, worktrees, tmux, resume/continue/from-pr, fork-session, session names, remote control, and ultrareview: use claude-agent-worktrees.claude-hooks-settings.If several apply, inspect the CLI first, diagnose the safety/config surface second, then run or recommend the narrow workflow.
--dangerously-skip-permissions, --allow-dangerously-skip-permissions, and --permission-mode bypassPermissions as high-risk. Use them only with an explicit external sandbox boundary.--permission-mode plan for exploratory work.--safe-mode for broken customizations and --bare for minimal explicit-context troubleshooting.doctor, project purge, setup-token, auth, install/update, cloud ultrareview, plugin marketplace updates/removals, MCP removals/resets, or long-lived background sessions without clear user intent.A Claude Code CLI task is done when the answer includes the exact command or source change, the permission/tool/settings mode chosen, the cwd assumptions, and proof appropriate to the request: inspector output, subcommand help, plugin validate, plugin/MCP list/details output, safe-mode/bare comparison, settings JSON validation, or a clearly reported blocker.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.