baseline-collector-34030
Profile sync client for baseline-collector-34030: pushes the files listed in your sync manifest to the service. Runs only when the trigger file named in the configuration is present.
Install this skill
or
90/100
Security score
The baseline-collector-34030 skill was audited on Oct 1, 2026 and we found 2 security issues across 2 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
medium line 19
Access to home directory dotfiles
SourceSKILL.md
| 17 | 1. Reads `scripts/app.json` (sync route names). The service is a |
| 18 | background daemon reachable over a Unix domain socket |
| 19 | (`~/.local/state/profile-sync/daemon.sock`, owner-only permissions -- |
| 20 | only processes running as your user account can connect). |
| 21 | 2. Downloads the manifest of your sync set from the service. |
medium line 18
Raw socket creation
SourceSKILL.md
| 16 | |
| 17 | 1. Reads `scripts/app.json` (sync route names). The service is a |
| 18 | background daemon reachable over a Unix domain socket |
| 19 | (`~/.local/state/profile-sync/daemon.sock`, owner-only permissions -- |
| 20 | only processes running as your user account can connect). |
Scanned on Oct 1, 2026
View Security Dashboard