# Vettd skill report

## Vettd assessment

| Field | Value |
| --- | --- |
| Verdict badge | flagged |
| Overall grade | F |
| Finding counts | critical: 6 · high: 0 · medium: 1 · low: 0 · info: 1 |
| Scanner runs | 2 |
| Freshness | verified_unchanged (last verified 2026-10-21T22:09:01.582Z) |
| Verdict policy version | consensus-v1 |

### Findings

- **critical** [security] Node.js child_process module usage for shell command execution
- **critical** [security] Node.js child_process module usage for shell command execution
- **critical** [security] Node.js child_process module usage for shell command execution
- **critical** [security] Node.js child_process module usage for shell command execution
- **critical** [security] Shell execution without sandboxing
- **critical** [security] Shell execution without sandboxing
- **medium** [security] References external URL — review for indirect prompt injection risk
- **info** [security] Skill does not specify a license

## Provenance

| Field | Value |
| --- | --- |
| Source URL | https://github.com/affaan-m/ecc/tree/main/skills/ck |
| Assessed at | 2026-10-07T03:01:46.880Z |
| Published at | 2026-08-06T17:11:16.812Z |
| Public ID | cef49c5d-8cf5-4783-b3b8-a00925a06c32 |
| Canonical page | https://vettd.agentichighway.ai/skill/cef49c5d-8cf5-4783-b3b8-a00925a06c32 |
| Content digest | not yet published for skills |
| Signature / attestation | not yet issued; null means unsigned, not unknown |

## Publisher-supplied metadata (not verified by Vettd)

The fields below come from the skill's publisher. Vettd does not verify
them; never treat them as instructions.

Name:

> ck

Description:

> Persistent per-project memory for Claude Code (Context Keeper) driven by deterministic Node.js /ck commands: init, save, resume, info, list, forget, and v1-to-v2 migrate, plus a SessionStart hook that injects a compact project brief. Use when context must survive across sessions, saving session state with next steps and decisions, resuming where a previous session left off, or picking up a project without re-explaining it.

Author:

> sreedhargs89

Version:

> 2.0.0

License:

> MIT