sgnk-recall
Facilitates deterministic loading of SGNK snapshots, enabling seamless transitions between accounts and tools while managing git states.
Install this skill
Security score
The sgnk-recall skill was audited on Jun 11, 2026 and we found 9 security issues across 2 threat categories, including 1 high-severity. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 33 | `"${GVC_BASE_DIR:-$HOME/Desktop/GitHub}/<name>"`. If that's not a git repo, |
Template literal with variable interpolation in command context
| 48 | ```bash |
Template literal with variable interpolation in command context
| 160 | ```bash |
Template literal with variable interpolation in command context
| 171 | ```bash |
Access to hidden dotfiles in home directory
| 26 | - `all` — every registered repo in `~/.sgnk/GLOBAL-REGISTRY.md`. |
Access to hidden dotfiles in home directory
| 34 | grep `~/.sgnk/GLOBAL-REGISTRY.md` for a matching basename. Ask the user |
Access to hidden dotfiles in home directory
| 92 | (`~/.claude/projects/<sanitized-cwd>/<uuid>.jsonl`). If anything in the cards |
Access to hidden dotfiles in home directory
| 163 | Creates `~/.sgnk/{bin,state}`, installs the three hook scripts, and merges the |
Access to hidden dotfiles in home directory
| 164 | SessionStart / UserPromptSubmit / SessionEnd hooks into `~/.claude/settings.json` |