skills-sync
Pass
Audited by Gen Agent Trust Hub on May 16, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local Python scripts and shell commands via
uv runto manage symbolic links. These operations are restricted to the user's local home directory paths (e.g.,~/.agents/,~/.claude/,~/.codebuddy/) and are consistent with the skill's stated purpose of synchronizing agent capabilities across different platforms. - [SAFE]: File system operations such as creating (
symlink_to), deleting (unlink), and traversing (iterdir) directories are performed solely on local paths. The script contains no network operations or external data ingestion that would pose a risk of exfiltration or injection.
Audit Metadata