Claude Code Task

• Analyzed: Mar 30, 2026, 12:31 PM
• Findings: 1
• Version: 1.2.0
• Hash: dd1195666e0971d90746c39d09a7d4af62e49a87596b2e9bf00a1c3bc11c668b
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill automates coding agents (like Claude Code) using tmux and git worktrees, specifically instructing the agent to use the `--dangerously-skip-permissions` flag in SKILL.md. While the instructions mandate a 'plan-first' approach and user approval before execution, the bypass of sub-agent security prompts combined with broad shell access via tmux represents a high-risk configuration. No evidence of intentional malice or data exfiltration was found, but the execution environment is inherently risky.