Shell command execution detected (child_process).
Critical
- Code
- suspicious.dangerous_exec
- Location
- bin/cli.js:41
- Evidence
const result = spawnSync(process.execPath, args, { stdio: "inherit" });
Security audit
@psyb0t/claudebox
Security checks across malware telemetry and agentic risk
Overview
This plugin is a transparent bridge to a user-run claudebox server, but that server can get powerful workspace file and shell access when connected.
Install only if you intend to give a trusted, self-hosted claudebox instance access to the workspace capabilities described by the plugin. Use a local or otherwise trusted URL, protect the bearer token if configured, and remember that the connected server can perform file changes, deletions, and shell/tool actions through the exposed MCP tools.
SkillSpector was not run because this plugin release contains no bundled skills.
VirusTotal
61/61 vendors flagged this plugin as clean.
Static analysis
Detected: suspicious.dangerous_exec