Is claude-code safe to install?

Security audit of tanbiralam/claude-code · Agent Tool by tanbiralam · ★ 2.3k

✓ SAFE Basic audit · rule-based scan · 42 published rules

Yes — claude-code passed AgentSkillsHub's rule-based security scan with no dangerous patterns detected. As with any third-party skill, confirm what credentials it requests before production use.

What it is: Claude Code is an agentic coding tool that lives in your terminal, understands your codebase, and helps you code faster by executing routine tasks, explaining complex code, and handling git workflows - all through natural language commands. All original source code is the property of Anthropic.

No dangerous patterns were detected: no credential exfiltration, no obfuscated downloads, no sandbox-escape attempts, no prompt-injection markers.

Audit summary

Security grade✓ SAFE
Quality score69/100
GitHub stars2.3k
LanguageTypeScript
Last updated

Check before you install

Run a live scan → Full details & install 5-dimension deep audit

Related Agent Tool audits

Browse all Agent Tool skills →

This is AgentSkillsHub's free basic audit: an automated rule-based scan with 42 published rules built on SlowMist's agent-security taxonomy (credential theft, obfuscated payloads, privilege escalation, covert instructions to the agent, and more) across 186,000+ open-source AI agent skills and MCP servers, refreshed every 8 hours. A SAFE grade is a scan result, not a guarantee — deep 5-dimension audits (code · credentials · vendor · supply-chain · operational) are available for enterprise. Audited: 2026-10-23.