sync-skill

Warn

Audited by Snyk on Jun 19, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W013: Attempt to modify system services in skill instructions.

  • Attempt to modify system services in skill instructions detected (high risk: 0.70). The skill instructs running an installer that creates/replaces symlinks under the user's home (e.g. ~/.claude/skills, ~/.agents/skills, ~/.codex/skills) and will remove existing real files or directories at those destinations, so it explicitly modifies the machine's filesystem and can be destructive (even though it doesn't request sudo).

Issues (1)

W013
MEDIUM

Attempt to modify system services in skill instructions.

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jun 19, 2026, 12:28 AM
Issues
1
Security Audit — snyk — sync-skill