claude-switch-models-setup

Warn

Audited by Gen Agent Trust Hub on Oct 28, 2026

Risk Level: MEDIUMPERSISTENCEDYNAMIC_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [PERSISTENCE]: The skill facilitates the installation of a macOS LaunchAgent (ai.daymade.claude-skill-source-sync) through the sync-local-skill-sources-daemon.sh script. This agent maintains a background process that monitors configuration files and automatically executes synchronization logic whenever changes are detected.
  • [DYNAMIC_EXECUTION]: Several components utilize dynamic execution and library loading. The sync-local-skill-sources.py script uses ctypes.CDLL(None) to invoke platform-specific C functions (renameatx_np on macOS and renameat2 on Linux) for atomic file operations. Additionally, the claude-profiles.sh script executes dynamically generated Python commands using python3 -c for JSON manipulation, and several scripts use subprocess to manage external utilities like git, uv, and launchctl.
  • [COMMAND_EXECUTION]: The skill performs extensive file system manipulation to manage isolated profile environments. This includes the automated creation and pruning of symlink trees within ~/.agents/skills and ~/.claude/, as well as the programmatic modification of Claude Code settings and state files (settings.json, .claude.json) which contain application configuration and session data.
  • [EXTERNAL_DOWNLOADS]: During setup, the skill's daemon installer uses the uv tool to download and provision a standalone Python 3.12 interpreter into its configuration directory to ensure a consistent runtime environment.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Oct 28, 2026, 04:16 PM