Security risk report for @forgecat/anthropics_claude-plugins-official_commit-commands v0.0.3
Source Integrity
Low
Static scanner rated source as low; profile is sourced from official Anthropic repository (https://github.com/anthropics/claude-plugins-official), a trusted first-party vendor.
Metadata includes commit hash (cf62a6c), Apache-2.0 license, and clear attribution to Anthropic, supporting authenticity and traceability.
Agent Intent
Low
Content describes legitimate git workflow automation (commit, push, PR creation, branch cleanup) with no instructions to manipulate the AI, exfiltrate data, read credentials, or leak system prompts.
Command files contain task descriptions and bash snippets for standard git operations; no hidden instructions, role hijacking, or guidance poisoning detected.
Documentation is educational and transparent about what each command does; no deceptive or attacker-serving guidance embedded.
Details
Evidence
README: 'Streamline your git workflow with simple commands for committing, pushing, and creating pull requests'
commit.md: 'Based on the above changes, create a single git commit.'
clean_gone.md: 'Cleans up all git branches marked as [gone]' — standard maintenance operation
Permissions
PRM-000Medium
The clean_gone.md command executes arbitrary bash pipelines (git worktree remove --force, git branch -D) without explicit allowed-tools restrictions, granting broader shell execution authority than the other commands.
The commit-push-pr command uses allowed-tools declarations but includes git push and gh pr create, which perform network operations (pushing to remote, creating PRs via GitHub CLI) that carry moderate risk.
Overall tool authority is reasonably aligned with the stated git workflow purpose, but the unrestricted bash execution in clean_gone.md slightly exceeds minimal necessary permissions.
Details
Evidence
commands/clean_gone.md: no allowed-tools frontmatter — executes multi-step bash pipeline including `git worktree remove --force` and `git branch -D`
commands/commit-push-pr.md: `Bash(git push:*)` and `Bash(gh pr create:*)` — network-touching operations
ForgeCat