cc-analytics Audit report.

Warnings

• Dependency or permission surface needs review
• Permission surface may require sandboxing
• The SKILL.md code snippet is incomplete, cutting off mid-script, which may hinder direct usage.
• The output HTML file location is not specified; users may not know where the report is saved.
• The script assumes ~/.claude/history.jsonl always exists and does not handle missing files gracefully.
• Hardcoded user path '/Users/ris/' in the script reduces portability for other users.
• Quality score needs review
• Permission surface needs review: shell or command execution, filesystem or document access
• Stars/forks activity: 224 stars, 25 forks; issue activity unavailable in current metadata
• Dependency/runtime risk: command execution surface, external package install surface
• Permission surface: shell or command execution, filesystem or document access

Method

This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.