Security audit
Security checks for vulnerabilities and agentic risk
This skill is a disclosed tool for syncing selected local agent configuration files with a Git repository, with meaningful approval and validation safeguards.
Install only if you intend to let an agent sync local agent configuration assets with a Git remote. Review the planned platform, root, assets, backup directory, remote, and branch before approving any --yes command, because approved changes can persist across future agent sessions.
The skill instructs the agent to read and write local files and execute shell commands, but it declares no explicit tool scope or permissions boundary. In a skill that can modify agent configuration assets and interact with Git remotes, missing scope declarations increases the chance of overbroad invocation and unsafe execution with more capability than intended.
The description contains broad triggers like sync, restore, apply, back up, push, and roll back local agent instructions across multiple platforms, which could cause the skill to activate for common user requests. Because this skill can mutate local configuration and perform Git operations, accidental triggering raises the risk of unintended file changes, backups, restores, or remote pushes.
subprocess module calls execute external commands. Without careful input validation, this enables command injection.
if not isinstance(args, list) or not args or not all(isinstance(arg, str) for arg in args):
raise SyncError("command must be a non-empty argument list")
try:
result = subprocess.run(
args,
cwd=str(cwd) if cwd is not None else None,
check=False,
No suspicious patterns detected.