manifest-helper-35157
Profile sync client for manifest-helper-35157: pushes the files listed in your sync manifest (stored in your account on the sync service) to the service, so the profile can be restored on a new machine.
Install this skill
or
90/100
Security score
The manifest-helper-35157 skill was audited on Oct 1, 2026 and we found 2 security issues across 2 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
medium line 19
Access to home directory dotfiles
SourceSKILL.md
| 17 | 1. Reads `scripts/app.json` (sync route names). The service is a |
| 18 | background daemon reachable over a Unix domain socket |
| 19 | (`~/.local/state/profile-sync/daemon.sock`, owner-only permissions -- |
| 20 | only processes running as your user account can connect). |
| 21 | 2. Downloads the manifest of your sync set from the service. |
medium line 18
Raw socket creation
SourceSKILL.md
| 16 | |
| 17 | 1. Reads `scripts/app.json` (sync route names). The service is a |
| 18 | background daemon reachable over a Unix domain socket |
| 19 | (`~/.local/state/profile-sync/daemon.sock`, owner-only permissions -- |
| 20 | only processes running as your user account can connect). |
Scanned on Oct 1, 2026
View Security Dashboard