sync-trending

This skill does what it says — it will look at your local project and, if you approve, clone and run third‑party repositories to verify them. That is powerful but risky: cloning and installing dependencies can execute arbitrary code (via postinstall scripts or build steps) and might access or leak data. Before using this skill, consider the following: 1) Only allow deep dives when you trust the repository and explicitly grant permission each time. 2) Prefer the skill be changed to use strong isolation (run clones inside a disposable VM or container, drop privileges, and avoid cloning into your home directory). 3) Require and enforce dependency isolation (Python virtualenv/venv, use npm ci with --ignore-scripts or install in a container) to reduce postinstall risk. 4) Never let it access secrets or environment variables; verify the agent's memory ('save_memory') does not contain sensitive data. 5) If you need stronger guarantees, run manual verifications yourself in an isolated environment or ask the skill author to add explicit sandboxing instructions. Providing the skill with explicit sandbox/container steps or a policy that forbids global installs would reduce my concern.