{
  "entry": {
    "kind": "plugin",
    "slug": "everything-claude-code",
    "name": "Everything Claude Code",
    "vendor": "affaan-m",
    "description": "A very large community bundle — reported at 64 specialised agents, 261 skills, and 84 commands — spanning TDD, code review, security auditing, deployment, and general automation, plus hooks that wire them into the session.\n\nScale is the whole risk story. A bundle of this size cannot realistically be read before installation, and it brings hundreds of instruction files plus hooks that execute on events into an agent that can already write files and run commands. It declares filesystem read and write, shell execution, and outbound network. Nothing here is inherently malicious, but the review burden is real: installing it is trusting a large surface authored by many hands, and the catalog scores it accordingly.",
    "website": "https://github.com/affaan-m",
    "repository": null,
    "documentationUrl": null,
    "license": null,
    "version": null,
    "trustLevel": "unknown",
    "capabilities": [
      "filesystem:read",
      "filesystem:write",
      "shell:execute",
      "network:outbound"
    ],
    "packaging": {
      "manager": "claude-plugin",
      "packageName": "everything-claude-code"
    },
    "configFiles": null,
    "category": null,
    "updatedAt": "2026-09-02",
    "risk": {
      "score": 100,
      "band": "critical",
      "signals": [
        {
          "id": "trust-unknown",
          "kind": "trust",
          "label": "Unknown publisher",
          "contribution": 20
        },
        {
          "id": "high-risk-capabilities",
          "kind": "capability",
          "label": "2 high-risk capabilities: filesystem:write, shell:execute",
          "contribution": 20
        },
        {
          "id": "exfiltration-risk",
          "kind": "combination",
          "label": "Data exfiltration risk (high)",
          "description": "Shell execution combined with outbound network access can exfiltrate arbitrary data from the machine.",
          "contribution": 15
        },
        {
          "id": "filesystem-write-shell-risk",
          "kind": "combination",
          "label": "Persistence + execution risk (medium)",
          "description": "Shell execution plus filesystem write means the agent can plant persistent backdoors (e.g. modifying startup scripts).",
          "contribution": 5
        },
        {
          "id": "full-control-risk",
          "kind": "combination",
          "label": "Full-control risk (critical)",
          "description": "Shell + filesystem write + network is effectively a remote shell on the employee machine.",
          "contribution": 25
        }
      ],
      "dangerousCombos": [
        {
          "id": "exfiltration-risk",
          "name": "Data exfiltration risk",
          "description": "Shell execution combined with outbound network access can exfiltrate arbitrary data from the machine.",
          "capabilities": [
            "shell:execute",
            "network:outbound"
          ],
          "severity": "high"
        },
        {
          "id": "filesystem-write-shell-risk",
          "name": "Persistence + execution risk",
          "description": "Shell execution plus filesystem write means the agent can plant persistent backdoors (e.g. modifying startup scripts).",
          "capabilities": [
            "shell:execute",
            "filesystem:write"
          ],
          "severity": "medium"
        },
        {
          "id": "full-control-risk",
          "name": "Full-control risk",
          "description": "Shell + filesystem write + network is effectively a remote shell on the employee machine.",
          "capabilities": [
            "shell:execute",
            "filesystem:write",
            "network:outbound"
          ],
          "severity": "critical"
        }
      ]
    },
    "dangerousCombos": [
      {
        "id": "exfiltration-risk",
        "name": "Data exfiltration risk",
        "description": "Shell execution combined with outbound network access can exfiltrate arbitrary data from the machine.",
        "capabilities": [
          "shell:execute",
          "network:outbound"
        ],
        "severity": "high"
      },
      {
        "id": "filesystem-write-shell-risk",
        "name": "Persistence + execution risk",
        "description": "Shell execution plus filesystem write means the agent can plant persistent backdoors (e.g. modifying startup scripts).",
        "capabilities": [
          "shell:execute",
          "filesystem:write"
        ],
        "severity": "medium"
      },
      {
        "id": "full-control-risk",
        "name": "Full-control risk",
        "description": "Shell + filesystem write + network is effectively a remote shell on the employee machine.",
        "capabilities": [
          "shell:execute",
          "filesystem:write",
          "network:outbound"
        ],
        "severity": "critical"
      }
    ]
  }
}