tvs-cc-migrator

This skill appears to do what it claims, but review and act cautiously: - The backup script reads ~/.claude/ and will detect settings.json tokens/keys. If you choose to keep sensitive values in the backup, the resulting archive will contain secrets that could be abused if leaked. Prefer the option that clears sensitive fields unless you accept the risk. - The manifest includes source_machine and source_user (hostname and username); be aware this exposes identifying metadata in the backup. - The included script imports child_process.execSync (likely for zipping or platform commands). Before running, skim scripts/backup.mjs to confirm no unexpected commands are executed automatically; the SKILL.md indicates the script only scans and packages locally, but verify the implementation if you have security concerns. - Keep backup archives encrypted and transfer them via trusted channels. When restoring on a new machine, verify the manifest and contents before applying or executing any reinstall commands listed in the package. If you want higher assurance, run the script on a disposable machine or inspect it line-by-line to confirm it does only local file operations and zipping.