registry / claude-cwc / 0.12.0

claude-cwc@0.12.0

Local-first compiler for Claude Code rules, skills, loops, and multi-agent workflows

AI Security Review

scanned 5h ago · by lpm-firewall-ai

LPM treats this as warn-only first-party agent extension lifecycle risk. The package can install a first-party Claude skill after an interactive confirmation and can install a local macOS LaunchAgent only through an explicit command. User-triggered workflows may invoke the local Claude CLI with broad permissions and execute configured shell setup commands; no unconsented install-time attack chain is present.

Static reason

No blocking static signals were detected.; previous stored version diff introduced dangerous source

Trigger

Run `cwc` and accept the skill prompt, run `cwc install-service`, or start a configured workflow.

Impact

Configured workflows can modify the selected project through the local Claude CLI; an explicit service can persist a localhost server.

Mechanism

First-party Claude extension setup, local service persistence, and user-configured workflow execution.

Rationale

Source inspection confirms a high-impact but package-aligned local AI-workflow capability, including first-party Claude skill lifecycle management and explicit service setup. It lacks a concrete malicious, exfiltration, or unconsented install-time persistence path.

Evidence

package.jsondist/bin/cwc.jsdist/src/server/workflow-runner.jsdist/src/server/run-launcher.jsdist/src/server/start.js~/.claude/skills/cwc-generate-workflow/SKILL.md~/Library/LaunchAgents/com.cwc.server.plist~/.cwc/server.pid

Network endpoints1

claude-cwc@0.12.0

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code