shared-config-sync

Pass

Audited by Gen Agent Trust Hub on Sep 24, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [Command Execution]: The skill performs shell-based operations using standard tools like git and the GitHub CLI (gh). These commands are used for synchronizing local edits with a remote repository and managing the setup process. The skill implements a 'confirm-first' policy for all significant actions, such as initial pushes or creating new repositories, ensuring the user remains in control of the execution flow.- [Repository Privacy and Data Exposure]: When bootstrapping a new synchronization repository, the skill strictly enforces the creation of private repositories via the --private flag. This design choice prevents accidental public exposure of the user's personal configuration and scripts. Additionally, it provides a default .gitignore to prevent sensitive files like local locks or potential credentials from being tracked.- [Operation Isolation and Integrity]: The skill is restricted to modifying files within the ~/.claude-config/ directory. It uses symbolic links to integrate with the agent's active configuration only after explicit user approval, which maintains a clear separation between the synced data and the host environment. It also explicitly forbids destructive operations such as force-pushing, ensuring that historical data remains intact across multiple machines.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 24, 2026, 06:05 PM