batch-git-url-replace

• Verdict: Advisory
• Analyzed: Apr 30, 2026, 5:17 AM
• Findings: 0
• Version: 1.0.0
• Reason codes: None
• Engine: v2.4.5

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

ASI02: Tool Misuse and Exploitation

NoteHigh Confidence

What this means

A broad scan directory or unusual URL text could update more repositories than intended or produce incorrect Git remote URLs.

Why it was flagged

The Linux workflow recursively finds Git repositories under the user-provided directory and directly edits their config files. This is aligned with the skill purpose, but it is a broad shell-based bulk modification and the sed expression may behave unexpectedly if URL values contain special sed characters.

Skill content

find "$SCAN_DIR" -name ".git" -type d ... sed -i "s|${OLD_URL}|${NEW_URL}|g" "$config"

Recommendation

Run it first on a small test directory, consider backing up repositories or .git/config files, and verify results with git remote -v before using it broadly.