buddy-reroll
Pass
Audited by Gen Agent Trust Hub on Apr 7, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a local script (scripts/buddy-reroll.js) using Node.js or Bun to compute buddy attributes based on UserID hashes. This script implements logic derived from reverse-engineering the Claude Code companion system to find specific cosmetic combinations.\n- [SAFE]: The skill's operations are limited to local configuration modification (~/.claude.json) for the purpose of pet customization. Access to fields like userID and accountUuid is necessary for the stated functionality, and no evidence of data exfiltration or unauthorized access was identified.
Audit Metadata