AI tool official cli
Risk level
low
10/100

Claude Code ↗

Claude Code is an officially published AI tool from Anthropic. Anomity scores its risk at 10 out of 100 (low).

Analysis summary

Claude Code is an officially published AI tool from Anthropic. Anomity scores its risk at 10 out of 100 (low).

Terminal-based AI coding agent with MCP, plugins, and skills

Why this entry scored 10 out of 100

This profile starts at the catalog's neutral base of 50. Because the entry is officially published, trust adjusts the score by -40. The entry declares no high-risk capabilities on its own, so capabilities add nothing. It matches no dangerous capability combinations. The clamped result is 10, placing it in the low band.

See the full scoring formula →

Findings

  • Published by the vendor Trust offset
    Contribution to score: -40

Configuration surface

Files this AI tool reads on the host. Anything written here changes what the agent does next.

  • claude-code-user-settings global json
    User-level settings
    • win32${USERPROFILE}\.claude\settings.json
    • darwin${HOME}/.claude/settings.json
    • linux${HOME}/.claude/settings.json
  • claude-code-user-settings-local global json
    User-level local settings overrides
    • win32${USERPROFILE}\.claude\settings.local.json
    • darwin${HOME}/.claude/settings.local.json
    • linux${HOME}/.claude/settings.local.json
  • claude-code-user-mcp global json
    User-level MCP servers in ~/.claude.json (top-level + per-project)
    • win32${USERPROFILE}\.claude.json
    • darwin${HOME}/.claude.json
    • linux${HOME}/.claude.json
  • claude-code-managed-settings global json
    Enterprise managed settings
    • win32C:\Program Files\ClaudeCode\managed-settings.json
    • darwin/Library/Application Support/ClaudeCode/managed-settings.json
    • linux/etc/claude-code/managed-settings.json
  • claude-code-managed-settings-dir global json
    Enterprise managed settings drop-ins (merged over the base file)
  • claude-code-managed-settings-legacy global json
    Legacy ProgramData managed settings (dead since v2.1.75 — misconfiguration signal)
    • win32C:\ProgramData\ClaudeCode\managed-settings.json
  • claude-code-managed-prefs global plist
    MDM machine policy (macOS managed preferences)
  • claude-code-remote-settings global json
    Cached server-managed org policy from the Claude admin console
    • win32${USERPROFILE}\.claude\remote-settings.json
    • darwin${HOME}/.claude/remote-settings.json
    • linux${HOME}/.claude/remote-settings.json
  • claude-code-stats-cache global json
    Usage + spend aggregates (tokens, cost, sessions) for AI-spend visibility
    • win32${USERPROFILE}\.claude\stats-cache.json
    • darwin${HOME}/.claude/stats-cache.json
    • linux${HOME}/.claude/stats-cache.json
  • claude-code-managed-mcp global json
    Enterprise managed MCP servers
    • win32C:\Program Files\ClaudeCode\managed-mcp.json
    • darwin/Library/Application Support/ClaudeCode/managed-mcp.json
    • linux/etc/claude-code/managed-mcp.json
  • claude-code-project-mcp project json
    Project-level MCP servers
    • win32${PROJECT}\.mcp.json
    • darwin${PROJECT}/.mcp.json
    • linux${PROJECT}/.mcp.json
  • claude-code-project-settings project json
    Project-level settings
    • win32${PROJECT}\.claude\settings.json
    • darwin${PROJECT}/.claude/settings.json
    • linux${PROJECT}/.claude/settings.json
  • claude-code-project-settings-local project json
    Project-level local settings (gitignored)
    • win32${PROJECT}\.claude\settings.local.json
    • darwin${PROJECT}/.claude/settings.local.json
    • linux${PROJECT}/.claude/settings.local.json
  • claude-code-plugin-index global json
    Claude Code installed plugins index
    • win32${USERPROFILE}\.claude\plugins\installed_plugins.json
    • darwin${HOME}/.claude/plugins/installed_plugins.json
    • linux${HOME}/.claude/plugins/installed_plugins.json
  • claude-code-plugin-manifest global json
    Claude Code plugin manifests (per cached plugin)
  • claude-code-user-skill global markdown-frontmatter
    Personal Claude Code skills (user-scope)
  • claude-code-scheduled-task-skill global markdown-frontmatter
    Scheduled-task skills (~/.claude/scheduled-tasks/*/SKILL.md) — agent-authored routines that run unattended on a cron cadence, often carrying credentials for the systems they poll
  • claude-code-project-skill project markdown-frontmatter
    Project-scope Claude Code skills
  • claude-code-plugin-skill global markdown-frontmatter
    Skills bundled inside installed Claude Code plugins
  • claude-code-user-agent global markdown-frontmatter
    Personal Claude Code custom subagents (user-scope)
  • claude-code-project-agent project markdown-frontmatter
    Project-scope Claude Code custom subagents