The Agent Skills Directory

[COMMAND_EXECUTION]: The skill uses subprocess.run to execute Git and GitHub CLI (gh) commands for repository renaming, remote URL updates, and status checks. This is the intended purpose of the tool and is implemented with proper validation (e.g., checking for clean worktree and matching folder names) and a multi-step confirmation process.
[REMOTE_CODE_EXECUTION]: The skill instructions use uv run to execute a local script included with the skill. This is a standard execution pattern for local tools and does not fetch or execute arbitrary remote code.
[DATA_EXPOSURE]: The script reads files in ~/.claude/projects, ~/.codex/sessions, and ~/.codex/config.toml to update paths for agent continuity. This access is scoped to specific configuration directories required for the rename operation and is documented in the skill's workflow.

repo-rename