Skills share-skill
📦
share-skill
Content revision r2 High Risk ⚙️ External commands🌐 Network access📁 Filesystem access
Share Local Skills Through Git Repositories
Local skills are difficult to version and publish. This skill migrates them into Git repositories and generates documentation and marketplace metadata.
Supports: Claude Codex Code(CC)
Stop for confirmation before installing.
Review the plan and obtain explicit user consent before changing files.
Install with my Agent
Copy this request to your Agent. It includes the canonical Skill page and manifest.
Agent request
Review the Skillstore skill "share-skill" from https://skillstore.io/skills/guo-yu-share-skill.md and its manifest at https://skillstore.io/api/skills/guo-yu-share-skill/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.Your Agent should still show its plan and request any confirmation required by the security policy.
Agent-readable resources
Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.
Test it
Using "share-skill". List my local skills.
Expected outcome:
Found three local skills. Two are available for migration, and one already links to the configured repository.
Using "share-skill". Migrate release-notes without a remote.
Expected outcome:
Moved release-notes into the skills repository, created its compatibility symlink, initialized version tracking, and skipped remote publication.
Using "share-skill". Generate English and Japanese documentation.
Expected outcome:
Generated both language variants, updated the skill catalog, created the documentation site, and reported the files awaiting review.
Security Audit
High Riskv6 • 8/5/2026 Open versioned report
Most static matches are false positives caused by Markdown syntax, multilingual text, benign URLs, or routine shell output capture. Confirmed risks include local moves and symlinks, broad persistent Bash authorization, unvalidated path placeholders, and third-party CDN resources without integrity checks. No prompt injection or credential-exfiltration intent was found. Static review was capped at 400/859 representative findings; omitted static matches are unconfirmed, so automatic publishing stays disabled until manual review.
6
Files scanned
5,861
Lines analyzed
38
Review items
0
False positives ignored
Confirmed security concerns (2)
High
Overbroad Persistent Shell Authorization
The /share-skill allow flow adds wildcard Bash permissions for reading ~/.claude, moving skills, creating symlinks, and running any Git command. This removes future confirmation for operations beyond the minimum required scope.
The permission list explicitly includes Bash(cat ~/.claude/*), Bash(mv ~/.claude/skills/* *), Bash(ln -s ...), and Bash(git *), then writes them to settings.json.
High
Unvalidated Skill Name Controls Filesystem Paths
The user-derived skill name is inserted into unquoted move, lookup, and symlink paths without a documented validation rule. Crafted names could select unintended paths or alter shell command structure.
The documented commands place <skill-name> directly into find, mv, and ln arguments, while no allowlist or canonical-path containment check is specified.
Capability review items (38)
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.
High
Hidden file in home directory
mv ~/.claude/skills/<skill-name> {skills_path}/
The instruction directly modifies content under ~/.claude by rewriting configuration, moving a skill, or creating a symlink. These persistent filesystem changes can disrupt the user's installation if inputs or paths are wrong.
High
Hidden file in home directory
ln -s {skills_path}/<skill-name> ~/.claude/skills/<skill-name>
The instruction directly modifies content under ~/.claude by rewriting configuration, moving a skill, or creating a symlink. These persistent filesystem changes can disrupt the user's installation if inputs or paths are wrong.
High
Hidden file in home directory
jq --arg root "$NEW_CODE_ROOT" '.code_root = $root' <<< "$CONFIG" > ~/.claude/share-skill-config.jso
The instruction directly modifies content under ~/.claude by rewriting configuration, moving a skill, or creating a symlink. These persistent filesystem changes can disrupt the user's installation if inputs or paths are wrong.
High
Hidden file in home directory
mv ~/.claude/skills/<skill-name> {skills_path}/
The instruction directly modifies content under ~/.claude by rewriting configuration, moving a skill, or creating a symlink. These persistent filesystem changes can disrupt the user's installation if inputs or paths are wrong.
High
Hidden file in home directory
ln -s {skills_path}/<skill-name> ~/.claude/skills/<skill-name>
The instruction directly modifies content under ~/.claude by rewriting configuration, moving a skill, or creating a symlink. These persistent filesystem changes can disrupt the user's installation if inputs or paths are wrong.
High
Hidden file in home directory
jq --arg root "$NEW_CODE_ROOT" '.code_root = $root' <<< "$CONFIG" > ~/.claude/share-skill-config.jso
The instruction directly modifies content under ~/.claude by rewriting configuration, moving a skill, or creating a symlink. These persistent filesystem changes can disrupt the user's installation if inputs or paths are wrong.
High
Hidden file in home directory
mv ~/.claude/skills/<skill-name> {skills_path}/
The instruction directly modifies content under ~/.claude by rewriting configuration, moving a skill, or creating a symlink. These persistent filesystem changes can disrupt the user's installation if inputs or paths are wrong.
High
Hidden file in home directory
ln -s {skills_path}/<skill-name> ~/.claude/skills/<skill-name>
The instruction directly modifies content under ~/.claude by rewriting configuration, moving a skill, or creating a symlink. These persistent filesystem changes can disrupt the user's installation if inputs or paths are wrong.
High
Symlink creation
ln -s {skills_path}/<skill-name> ~/.claude/skills/<skill-name>
The skill explicitly creates symlinks inside ~/.claude/skills or grants a wildcard permission for that operation. Incorrect or manipulated paths could redirect skill loading or replace an expected local path.
High
Symlink creation
"Bash(ln -s {skills_path}/* *)",
The skill explicitly creates symlinks inside ~/.claude/skills or grants a wildcard permission for that operation. Incorrect or manipulated paths could redirect skill loading or replace an expected local path.
High
Symlink creation
- Bash(ln -s {skills_path}/* *)
The skill explicitly creates symlinks inside ~/.claude/skills or grants a wildcard permission for that operation. Incorrect or manipulated paths could redirect skill loading or replace an expected local path.
High
Symlink creation
ln -s {skills_path}/<skill-name> ~/.claude/skills/<skill-name>
The skill explicitly creates symlinks inside ~/.claude/skills or grants a wildcard permission for that operation. Incorrect or manipulated paths could redirect skill loading or replace an expected local path.
High
Symlink creation
Install with: ln -s {skills_path}/skill-i18n ~/.claude/skills/skill-i18n
The skill explicitly creates symlinks inside ~/.claude/skills or grants a wildcard permission for that operation. Incorrect or manipulated paths could redirect skill loading or replace an expected local path.
High
Symlink creation
"Bash(ln -s {skills_path}/* *)",
The skill explicitly creates symlinks inside ~/.claude/skills or grants a wildcard permission for that operation. Incorrect or manipulated paths could redirect skill loading or replace an expected local path.
High
Symlink creation
- Bash(ln -s {skills_path}/* *)
The skill explicitly creates symlinks inside ~/.claude/skills or grants a wildcard permission for that operation. Incorrect or manipulated paths could redirect skill loading or replace an expected local path.
High
Symlink creation
ln -s {skills_path}/<skill-name> ~/.claude/skills/<skill-name>
The skill explicitly creates symlinks inside ~/.claude/skills or grants a wildcard permission for that operation. Incorrect or manipulated paths could redirect skill loading or replace an expected local path.
High
Symlink creation
"Bash(ln -s {skills_path}/* *)",
The skill explicitly creates symlinks inside ~/.claude/skills or grants a wildcard permission for that operation. Incorrect or manipulated paths could redirect skill loading or replace an expected local path.
High
Symlink creation
- Bash(ln -s {skills_path}/* *)
The skill explicitly creates symlinks inside ~/.claude/skills or grants a wildcard permission for that operation. Incorrect or manipulated paths could redirect skill loading or replace an expected local path.
Medium
Hidden file access
mv ~/.claude/skills/<skill-name> {skills_path}/
The instruction directly modifies content under ~/.claude by rewriting configuration, moving a skill, or creating a symlink. These persistent filesystem changes can disrupt the user's installation if inputs or paths are wrong.
Medium
Hidden file access
ln -s {skills_path}/<skill-name> ~/.claude/skills/<skill-name>
The instruction directly modifies content under ~/.claude by rewriting configuration, moving a skill, or creating a symlink. These persistent filesystem changes can disrupt the user's installation if inputs or paths are wrong.
Medium
Hidden file access
jq --arg root "$NEW_CODE_ROOT" '.code_root = $root' <<< "$CONFIG" > ~/.claude/share-skill-config.jso
The instruction directly modifies content under ~/.claude by rewriting configuration, moving a skill, or creating a symlink. These persistent filesystem changes can disrupt the user's installation if inputs or paths are wrong.
Medium
Hidden file access
mv ~/.claude/skills/<skill-name> {skills_path}/
The instruction directly modifies content under ~/.claude by rewriting configuration, moving a skill, or creating a symlink. These persistent filesystem changes can disrupt the user's installation if inputs or paths are wrong.
Medium
Hidden file access
ln -s {skills_path}/<skill-name> ~/.claude/skills/<skill-name>
The instruction directly modifies content under ~/.claude by rewriting configuration, moving a skill, or creating a symlink. These persistent filesystem changes can disrupt the user's installation if inputs or paths are wrong.
Medium
Hidden file access
jq --arg root "$NEW_CODE_ROOT" '.code_root = $root' <<< "$CONFIG" > ~/.claude/share-skill-config.jso
The instruction directly modifies content under ~/.claude by rewriting configuration, moving a skill, or creating a symlink. These persistent filesystem changes can disrupt the user's installation if inputs or paths are wrong.
Medium
Hidden file access
mv ~/.claude/skills/<skill-name> {skills_path}/
The instruction directly modifies content under ~/.claude by rewriting configuration, moving a skill, or creating a symlink. These persistent filesystem changes can disrupt the user's installation if inputs or paths are wrong.
Medium
Hidden file access
ln -s {skills_path}/<skill-name> ~/.claude/skills/<skill-name>
The instruction directly modifies content under ~/.claude by rewriting configuration, moving a skill, or creating a symlink. These persistent filesystem changes can disrupt the user's installation if inputs or paths are wrong.
Low
Hardcoded URL
<link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/tocbot/4.32.2/tocbot.min.css">
The generated site loads a third-party CDN resource without Subresource Integrity metadata. Compromise or unexpected modification of that dependency could affect published documentation visitors.
Low
Hardcoded URL
<script src="https://cdnjs.cloudflare.com/ajax/libs/tocbot/4.32.2/tocbot.min.js"></script>
The generated site loads a third-party CDN resource without Subresource Integrity metadata. Compromise or unexpected modification of that dependency could affect published documentation visitors.
Low
Hardcoded URL
<link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.9.0/styles/githu
The generated site loads a third-party CDN resource without Subresource Integrity metadata. Compromise or unexpected modification of that dependency could affect published documentation visitors.
Low
Hardcoded URL
<script src="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.9.0/highlight.min.js"></script>
The generated site loads a third-party CDN resource without Subresource Integrity metadata. Compromise or unexpected modification of that dependency could affect published documentation visitors.
Low
Hardcoded URL
<link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/tocbot/4.32.2/tocbot.min.css">
The generated site loads a third-party CDN resource without Subresource Integrity metadata. Compromise or unexpected modification of that dependency could affect published documentation visitors.
Low
Hardcoded URL
<script src="https://cdnjs.cloudflare.com/ajax/libs/tocbot/4.32.2/tocbot.min.js"></script>
The generated site loads a third-party CDN resource without Subresource Integrity metadata. Compromise or unexpected modification of that dependency could affect published documentation visitors.
Low
Hardcoded URL
<link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.9.0/styles/githu
The generated site loads a third-party CDN resource without Subresource Integrity metadata. Compromise or unexpected modification of that dependency could affect published documentation visitors.
Low
Hardcoded URL
<script src="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.9.0/highlight.min.js"></script>
The generated site loads a third-party CDN resource without Subresource Integrity metadata. Compromise or unexpected modification of that dependency could affect published documentation visitors.
Low
Hardcoded URL
<link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/tocbot/4.32.2/tocbot.min.css">
The generated site loads a third-party CDN resource without Subresource Integrity metadata. Compromise or unexpected modification of that dependency could affect published documentation visitors.
Low
Hardcoded URL
<script src="https://cdnjs.cloudflare.com/ajax/libs/tocbot/4.32.2/tocbot.min.js"></script>
The generated site loads a third-party CDN resource without Subresource Integrity metadata. Compromise or unexpected modification of that dependency could affect published documentation visitors.
Low
Hardcoded URL
<link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.9.0/styles/githu
The generated site loads a third-party CDN resource without Subresource Integrity metadata. Compromise or unexpected modification of that dependency could affect published documentation visitors.
Low
Hardcoded URL
<script src="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.9.0/highlight.min.js"></script>
The generated site loads a third-party CDN resource without Subresource Integrity metadata. Compromise or unexpected modification of that dependency could affect published documentation visitors.
Risk Factors
⚙️ External commands (50)
SKILL.ja.md:755-757 SKILL.ja.md:785-787 SKILL.ja.md:787-795 SKILL.ja.md:824-827 SKILL.ja.md:827-829 SKILL.ja.md:829-832 SKILL.ja.md:1282-1286 SKILL.ja.md:1464 SKILL.ja.md:1514 SKILL.ja.md:1564 SKILL.ja.md:109 SKILL.ja.md:113 SKILL.ja.md:115 SKILL.ja.md:120 SKILL.ja.md:291 SKILL.ja.md:292 SKILL.ja.md:372 SKILL.ja.md:433 SKILL.ja.md:465 SKILL.ja.md:466 SKILL.ja.md:468 SKILL.ja.md:1152 SKILL.ja.md:1190 SKILL.ja.md:1199 SKILL.ja.md:1200 SKILL.ja.md:1582 SKILL.ja.md:1583 SKILL.ja.md:1584 SKILL.ja.md:1585 SKILL.ja.md:1586 SKILL.md:14 SKILL.md:15 SKILL.md:16 SKILL.md:17 SKILL.md:18 SKILL.md:19 SKILL.md:20 SKILL.md:21 SKILL.md:22 SKILL.md:23 SKILL.md:24 SKILL.md:29 SKILL.md:31-48 SKILL.md:48-54 SKILL.md:54 SKILL.md:55 SKILL.md:56-57 SKILL.md:57-58 SKILL.md:58 SKILL.md:63
🌐 Network access (50)
SKILL.ja.md:489 SKILL.ja.md:745 SKILL.ja.md:755 SKILL.ja.md:785 SKILL.ja.md:787 SKILL.ja.md:800 SKILL.ja.md:803 SKILL.ja.md:810 SKILL.ja.md:827 SKILL.ja.md:979 SKILL.ja.md:1018 SKILL.ja.md:1021 SKILL.ja.md:1043 SKILL.ja.md:1046 SKILL.ja.md:1364 SKILL.ja.md:1380 SKILL.ja.md:1448 SKILL.ja.md:1473 SKILL.ja.md:1498 SKILL.ja.md:1523 SKILL.ja.md:1548 SKILL.ja.md:1573 SKILL.ja.md:1654 SKILL.md:729 SKILL.md:1126 SKILL.md:1128 SKILL.md:1177 SKILL.md:1187 SKILL.md:1226 SKILL.md:1228 SKILL.md:1241 SKILL.md:1242 SKILL.md:1257 SKILL.md:1469 SKILL.md:1481 SKILL.md:1537 SKILL.md:1540 SKILL.md:1562 SKILL.md:1565 SKILL.md:1720 SKILL.md:1736 SKILL.md:1804 SKILL.md:1808 SKILL.md:1813 SKILL.md:1829 SKILL.md:1854 SKILL.md:1858 SKILL.md:1863 SKILL.md:1879 SKILL.md:1904
📁 Filesystem access (50)
SKILL.ja.md:829 SKILL.ja.md:29 SKILL.ja.md:87 SKILL.ja.md:150 SKILL.ja.md:179 SKILL.ja.md:213 SKILL.ja.md:275 SKILL.ja.md:278 SKILL.ja.md:281 SKILL.ja.md:289 SKILL.ja.md:290 SKILL.ja.md:297 SKILL.ja.md:316 SKILL.ja.md:347 SKILL.ja.md:363 SKILL.ja.md:368 SKILL.ja.md:369 SKILL.ja.md:372 SKILL.ja.md:391 SKILL.ja.md:394 SKILL.ja.md:462 SKILL.ja.md:464 SKILL.ja.md:484 SKILL.ja.md:498 SKILL.ja.md:509 SKILL.ja.md:586 SKILL.ja.md:589 SKILL.ja.md:606 SKILL.ja.md:613 SKILL.ja.md:614 SKILL.ja.md:617 SKILL.ja.md:636 SKILL.ja.md:637 SKILL.ja.md:640 SKILL.ja.md:647 SKILL.ja.md:1070 SKILL.ja.md:1138 SKILL.ja.md:1152 SKILL.ja.md:1321 SKILL.ja.md:1582 SKILL.ja.md:29 SKILL.ja.md:87 SKILL.ja.md:150 SKILL.ja.md:179 SKILL.ja.md:213 SKILL.ja.md:275 SKILL.ja.md:278 SKILL.ja.md:281 SKILL.ja.md:289 SKILL.ja.md:290
Audited by: codex View Audit History →
Share & cite this report
Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.
Copy report link
https://skillstore.io/skills/guo-yu-share-skill/audits/6?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown badge
[](https://skillstore.io/skills/guo-yu-share-skill?utm_source=security_passport_badge)HTML badge
<a href="https://skillstore.io/skills/guo-yu-share-skill?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/guo-yu-share-skill/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Embed card
<iframe src="https://skillstore.io/embed/skills/guo-yu-share-skill.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Academic citations (APA · BibTeX · CFF)
APA citation
guo-yu. (2026). share-skill security audit report (audit version 6) [Author version unspecified]. Skillstore. https://skillstore.io/skills/guo-yu-share-skill/audits/6BibTeX citation
@techreport{guo-yu-guo-yu-share-skill-2026,
author = {guo-yu},
title = {share-skill security audit report (audit version 6)},
institution = {Skillstore},
year = {2026},
number = {6},
url = {https://skillstore.io/skills/guo-yu-share-skill/audits/6},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "share-skill security audit report (audit version 6)"
version: "unspecified"
type: report
authors:
- name: "guo-yu"
date-released: "2026-08-05"
url: "https://skillstore.io/skills/guo-yu-share-skill/audits/6"
identifiers:
- type: other
value: "skillstore:guo-yu-share-skill:audit:6"
description: "Skillstore immutable audit report identifier"
Skillstore Score
Why this score Evidence Confidence: Medium 55
Architecture
85
Maintainability
87
Content
76
Community
70
Spec Compliance
What You Can Build
Publish a Personal Skill
Move one local skill into a Git repository while preserving Claude Code discovery.
Maintain a Team Skill Collection
Add skills to a shared repository with manifests, README tables, and consistent documentation.
Build a Public Skill Catalog
Generate multilingual GitHub Pages documentation and marketplace metadata for an open source collection.
Try These Prompts
List Local Skills
List local skills available for migration. Show each source path and identify existing symlinks. Do not modify files.
Migrate Without Publishing
Migrate [skill-name] into my configured skills repository. Create the compatibility symlink, but do not add a remote or push.
Publish to a Specific Remote
Migrate [skill-name] to [remote-url]. Show the destination, staged files, and remote before requesting confirmation to push.
Generate a Multilingual Catalog
Generate documentation for [repository] in English, Chinese, and Japanese. Preserve existing package scripts and use [domain] only after confirmation.
Best Practices
- Review the resolved source, destination, remote, branch, and staged files before approving changes.
- Back up local skills and keep Git recovery information until the migrated skill works through its symlink.
- Scan skill content for credentials and private data before any commit or push.
Avoid
- Do not grant wildcard Bash permissions for convenience.
- Do not accept unvalidated skill names, paths, domains, or remote URLs.
- Do not push automatically after migration or documentation generation.
Frequently Asked Questions
Does this skill create a remote repository?
No. The remote must exist, and local authentication must permit access before a push can succeed.
Will Claude Code still find a migrated skill?
Yes. The workflow creates a symlink from the original skills directory to the repository location.
Can I migrate without publishing?
Yes. Skip remote configuration and review the local repository before any later push.
Which documentation languages are supported?
The documented workflow supports English, Simplified Chinese, Japanese, and user-specified language codes.
Does it overwrite an existing destination?
The instructions require an error when the target exists, but users should still keep a backup.
What permissions does it need?
It needs scoped access to selected skill files, destination paths, Git commands, and configuration fields used by the requested operation.