shared-config-sync
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [Command Execution]: The skill performs shell-based operations using standard tools like
gitand the GitHub CLI (gh). These commands are used for synchronizing local edits with a remote repository and managing the setup process. The skill implements a 'confirm-first' policy for all significant actions, such as initial pushes or creating new repositories, ensuring the user remains in control of the execution flow.- [Repository Privacy and Data Exposure]: When bootstrapping a new synchronization repository, the skill strictly enforces the creation of private repositories via the--privateflag. This design choice prevents accidental public exposure of the user's personal configuration and scripts. Additionally, it provides a default.gitignoreto prevent sensitive files like local locks or potential credentials from being tracked.- [Operation Isolation and Integrity]: The skill is restricted to modifying files within the~/.claude-config/directory. It uses symbolic links to integrate with the agent's active configuration only after explicit user approval, which maintains a clear separation between the synced data and the host environment. It also explicitly forbids destructive operations such as force-pushing, ensuring that historical data remains intact across multiple machines.
Audit Metadata