magpie-setup-shared-config-sync
Pass
Audited by Gen Agent Trust Hub on Jun 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- Restricted Directory Access: The skill is strictly scoped to the
~/.claude-config/directory. It contains explicit instructions to never modify files outside this path, which helps prevent unintended alterations to other system or application settings. - Controlled Network Operations: The skill performs
git pushandgit pulloperations to synchronize data with a remote repository. While this involves sending local configuration data externally, it is the core intended purpose of the skill and is governed by strict rules that prohibit force-pushing or rewriting history. - Mandatory User Confirmation: A significant security consideration is the requirement for explicit user approval. The skill is instructed to draft commit messages and display diffs for the user to review before any changes are committed or pushed, ensuring the user maintains oversight of the synchronization process.
- Indirect Injection Surface: The skill processes local files within the sync repository, such as scripts and markdown files. While this is necessary for detecting changes, it is a common practice to ensure that configuration files are maintained in a secure and trusted environment to avoid influencing the agent's behavior through embedded instructions.
Audit Metadata