Skills/Claude Code plugins/42crunch-api-security-testing

42crunch-api-security-testing@1.5.5

CAUTION

Publisher claims: "Automate API security directly in Claude Code with 42Crunch - automatically audit OpenAPI specs, detect vulnerabilities aligned with OWASP API Security risks (including BOLA/BFLA), and apply AI-powered fixes. Designed for AI-assisted development workflows, it provides continuous guardrails through an audit->scan->remediate->validate loop, ensuring APIs meet enterprise security standards before deployment." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry Claude Code plugin marketplacePublisher 42crunch-ai · joined 0 days agoInstalls 0Last detonated 56 min ago
Dispute verdict

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only

Static findings

HIGH
Access to sensitive file pathsskills/code-to-oas/SKILL.md:213 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
File permission modification commandskills/42crunch-setup/SKILL.md:68 · File permission modification command — agent changes file ownership/permissions
AST05
HIGH
File permission modification commandreferences/credential-setup.md:147 · File permission modification command — agent changes file ownership/permissions
AST05
CRITICAL
Prompting user to enter sensitive credentialsreferences/credential-setup.md:55 · Prompting user to enter sensitive credentials — social engineering
AST03
HIGH
File permission modification commandreferences/binary-setup.md:184 · File permission modification command — agent changes file ownership/permissions
AST05
HIGH
Access to sensitive file pathsreferences/credential-setup.md:7 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
File permission modification commandreferences/credential-setup.md:205 · File permission modification command — agent changes file ownership/permissions
AST05
HIGH
File permission modification commandskills/42crunch-setup/SKILL.md:153 · File permission modification command — agent changes file ownership/permissions
AST05
HIGH
Access to sensitive file pathsskills/code-to-oas/SKILL.md:194 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
42crunch-api-security-testing@1.5.5 safety verdict: Caution 70/100 — KillerSkills