claude-code-repo-migration
Pass
Audited by Gen Agent Trust Hub on Aug 24, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/worktree-slugs.pyutilizes thesubprocessmodule to executegit worktree list. This is a necessary administrative function to identify and repair git worktrees during the migration process. - [DYNAMIC_EXECUTION]: The
reference/playbook.mdinstructions include Python scripts executed via shell piping to handle complex transcript updates and JSON configuration remapping. These operations are performed locally on the user's data and are statically defined within the skill. - [DATA_EXPOSURE_AND_EXFILTRATION]: The skill performs read and write operations on
~/.claude.jsonand session transcripts in~/.claude/projects/. These modifications are limited to remapping directory paths to ensure history and project trust settings persist after relocation. No evidence of unauthorized data exposure or external exfiltration was found.
Audit Metadata