webup-buddy-reroll

SUSPICIOUS. The skill’s core capability—rewriting `~/.claude.json` to force a desired buddy—is aligned with its stated goal, but the OAuth path is disproportionate: it asks the user to paste a sensitive token into chat and uses that token to manipulate Claude auth/config state. Data flow stays mostly local, and there is no confirmed exfiltration or hidden execution, but the credential-handling pattern plus unpinned `npx -y bun` runtime execution makes this a medium-risk skill rather than benign.

The code does not show evidence of malware, data theft, network exfiltration, command injection, or obfuscation. Its notable behavior is an explicit exploit-like search for a desired deterministic companion followed by optional modification of ~/.claude.json, including changing userID and deleting accountUuid. The --apply operation is potentially disruptive and should only be used with a backup and explicit authorization. The risk is primarily account/configuration tampering, not system compromise.