Educational security demo — 23 post-install attack scenarios a malicious Claude Code plugin can execute. All 'malicious' code paths are intentionally observable, reversible, and scoped to httpbin.org. READ SAFETY.md FIRST. Requires DEMO_ACKNOWLEDGED=1 env var to arm.
7 skills · 1 command · 3 agents · 1 MCP server · hooks
0