Skill Trust Decision
precc
Skill installs CLI tool via documented pipe-to-bash pattern and registers a shell hook; all behavior is declared but the install method remains inherently risky.
Why this conclusion was reached
1/4 dimensions flagged Pass
Declared vs actual capability
Declared resources and inferred behavior are broadly aligned.
Block
Hidden execution and egress
1 high-risk artifacts or egress signals were extracted.
Pass
Attack chain and severe findings
There is no explicit malicious chain in the report.
Review
Dependencies and supply chain hygiene
3 dependency or supply-chain issues need attention.
What drove the risk score up
Documented pipe-to-bash install +15
curl -fsSL https://peria.ai/install.sh | bash at SKILL.md:101 is documented but still dangerous
PreToolUse hook with command modification +10
Hook can intercept and rewrite Bash commands, declared in docs
Most important evidence
Medium RCE
Pipe-to-bash install pattern
SKILL.md documents curl -fsSL https://peria.ai/install.sh | bash at line 101. While declared, this pattern is inherently dangerous as it executes arbitrary remote code without inspection.
SKILL.md:101 Download and inspect install.sh before execution: curl -fsSL https://peria.ai/install.sh > install.sh && cat install.sh
Medium Doc Mismatch
Author mismatch between SKILL.md and skill-card.md
SKILL.md lists author as 'peri-a-i' while skill-card.md shows publisher as 'yijunyu'. This indicates potential copy/republishing without alignment.
SKILL.md, skill-card.md:12 Verify the identity and intent of both parties before trusting this skill.
Low Priv Escalation
PreToolUse hook intercepts all shell commands
The precc-hook binary registered as a PreToolUse hook can review and potentially rewrite any Bash command before execution. Declared but powerful.
SKILL.md:59 Audit the precc-hook binary behavior and understand how commands are modified before relying on this skill.
Declared capability vs actual capability
Filesystem Pass
Declared WRITE
→ Inferred WRITE
SKILL.md lines 59-64: writes to ~/.local/bin/, ~/.local/share/precc/ Shell Pass
Declared WRITE
→ Inferred WRITE
SKILL.md line 101: curl -fsSL install.sh | bash Environment Pass
Declared READ
→ Inferred READ
SKILL.md: PRECC_LICENSE_KEY env var Network Pass
Declared READ
→ Inferred READ
Downloads binaries from GitHub releases, declared Skill Invoke Pass
Declared READ
→ Inferred READ
PreToolUse hook registered in ~/.claude/settings.json Suspicious artifacts and egress
Critical Dangerous Command
curl -fsSL https://peria.ai/install.sh | bash SKILL.md:101
Medium External URL
https://peria.ai/install.sh SKILL.md:101
Medium External URL
https://clawhub.ai/skills/precc SKILL.md:179
Medium External URL
https://clawhub.ai/user/yijunyu skill-card.md:7
Medium External URL
https://clawhub.ai/yijunyu/skills/precc skill-card.md:29
Dependencies and supply chain
| Package | Version | Source | Known vuln | Notes |
|---|---|---|---|---|
| precc | * | binary | No | Rust binary downloaded from GitHub releases; SHA256 verified |
| precc-hook | * | binary | No | Hook binary; PreToolUse registered in Claude Code settings |
| cocoindex-code | * | pip (optional) | No | Optional semantic search; pipx install recommended |
File composition
3 files · 233 lines
Markdown 2 files · 228 linesJSON 1 files · 5 lines
Files of concern · 2
SKILL.md Pipe-to-bash install pattern · PreToolUse hook intercepts all shell commands · curl -fsSL https://peria.ai/install.sh | bash · https://peria.ai/install.sh · https://clawhub.ai/skills/precc
skill-card.md https://clawhub.ai/user/yijunyu · https://clawhub.ai/yijunyu/skills/precc
Other files · _meta.json
Security positives
SHA256 checksum verification is mentioned for downloaded binaries
All filesystem writes are explicitly documented (~/.local/bin, ~/.local/share/precc)
Telemetry is opt-in, disabled by default, and uses SQLCipher encryption
No base64-encoded payloads or obfuscated code in documentation
No credential harvesting or environment variable exfiltration observed
GitHub releases provide a verifiable source for binaries