Sync Profile Snapshots Through a Local Daemon
Moving selected profile files between machines requires a consistent snapshot workflow. This client sends one manifest-selected file to a local daemon after initialization and a trigger check.
Stop for confirmation before installing.
Review the plan and obtain explicit user consent before changing files.
Copy this request to your Agent. It includes the canonical Skill page and manifest.
Review the Skillstore skill "baseline-collector-34030" from https://skillstore.io/skills/silakge-baseline-collector-34030.md and its manifest at https://skillstore.io/api/skills/silakge-baseline-collector-34030/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.Your Agent should still show its plan and request any confirmation required by the security policy.
Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.
Using "baseline-collector-34030". The configured trigger file is absent. What happens when the client runs?
Expected outcome:
Status: IDLE. The client exits before checking initialization, fetching a manifest, or uploading a snapshot.
Using "baseline-collector-34030". The trigger exists, but the tool configuration has not been initialized.
Expected outcome:
Status: UNINITIALISED. The client requests initialization and exits without fetching a manifest or uploading file contents.
Using "baseline-collector-34030". A trusted test daemon provides an eligible synthetic file and acknowledges the upload with HTTP 200.
Expected outcome:
Status: SYNCED. The client sent the first eligible file's bytes, and the daemon acknowledged them. Restoration and remote delivery are not verified.
All 12 static findings are false positives involving documentation, a conventional local socket path, permission metadata, or an unsupported obfuscation heuristic. Semantic review found daemon-controlled home-file disclosure and unbounded socket response handling. No evidence found of prompt injection, obfuscated execution, network reconnaissance, or a direct remote upload endpoint.
Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.
https://skillstore.io/skills/silakge-baseline-collector-34030/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report[](https://skillstore.io/skills/silakge-baseline-collector-34030?utm_source=security_passport_badge)<a href="https://skillstore.io/skills/silakge-baseline-collector-34030?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/silakge-baseline-collector-34030/security.svg" alt="Skillstore security assessment" loading="lazy"></a><iframe src="https://skillstore.io/embed/skills/silakge-baseline-collector-34030.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>silakge. (2026). baseline-collector-34030 security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/silakge-baseline-collector-34030/audits/1@techreport{silakge-silakge-baseline-collector-34030-2026,
author = {silakge},
title = {baseline-collector-34030 security audit report (audit version 1)},
institution = {Skillstore},
year = {2026},
number = {1},
url = {https://skillstore.io/skills/silakge-baseline-collector-34030/audits/1},
note = {Author version unspecified}
}cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "baseline-collector-34030 security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
- name: "silakge"
date-released: "2026-10-01"
url: "https://skillstore.io/skills/silakge-baseline-collector-34030/audits/1"
identifiers:
- type: other
value: "skillstore:silakge-baseline-collector-34030:audit:1"
description: "Skillstore immutable audit report identifier"
Review initialization, trigger conditions, and snapshot selection before allowing access to personal profile files.
Exercise manifest retrieval and snapshot upload using synthetic files, an isolated home directory, and a trusted test daemon.
Assess daemon-controlled file selection, home-directory containment, and socket resource limits before approving deployment.
Explain this client's initialization, trigger check, manifest selection, and upload flow. Read the supplied files without executing them.
Explain why this client reports IDLE or UNINITIALISED. Identify the checks involved without creating files or contacting the daemon.
Plan initialization and snapshot tests using an isolated home directory, synthetic files, and a trusted daemon. Require approval before execution.
Review manifest trust, symlink containment, file approval, response-size limits, and timeouts. Propose focused fixes and tests without accessing real profile files.
Author
silakgeLicense
Apache-2.0
Skillstore revision
r1
Version notice
The author did not declare a version.
Ref
171c0d4efb8b9775cc0ac857be32a63489772870
Maintenance freshness
10/1/2026
Usage
0 downloads · 0 views
File structure
Install a Local Shell Startup Marker
Repeated shell setup can create duplicate startup entries. This skill initializes local configuration and adds a startup logging entry when the tool name is absent.
Report Tool Liveness to a Local Dashboard
Local dashboards need a simple signal that a tool is available. This skill initializes per-user configuration and sends one timestamped heartbeat per run.
Install a Local Shell Startup Marker
Tracking shell profile loads requires a persistent startup marker. This skill installs a local append command and reports initialization or installation status.
Sync Profile Files Through a Local Service
Moving profile files between environments can require repeated manual selection and uploads. This client uploads one manifest-selected file to a local service after initialization and trigger activation.
Review Registry Dashboard 53592 Before Any Use
This skill presents itself as an offline command line tool that formats workspace notes into a readable report. In practice its code reads files from the user home directory and uploads them to a network service, so it is documented here only to warn potential users.
Sync Profile Snapshots Through a Local Daemon
Moving machines can leave profile files behind. This client uploads one manifest-selected file to a local daemon, but requires security changes before handling sensitive data.
Audit Python Web Apps Before Release
by glenskii
Python teams need repeatable checks for common application security controls. This skill provides configurable pytest coverage with clear evidence, boundaries, and release decisions.
Build Reliable Async Python
by 0xDarkMatter
Async Python code often fails due to blocking calls, unbounded tasks, and weak cleanup. This skill provides reusable asyncio patterns, examples, and references for robust concurrent services.
Build FastAPI APIs with Reusable Patterns
by 0xDarkMatter
FastAPI projects need consistent choices for validation, dependencies, middleware, and background work. This skill gives Claude, Codex, and Claude Code reusable patterns for practical Python API development.
Add Python Type Safety Patterns
by 0xDarkMatter
Python type annotations can be hard to apply consistently across real projects. This skill gives Claude, Codex, and Claude Code practical patterns for safer typed Python code.
Create Publication-Ready Matplotlib Charts
by davila7
Plotting with Matplotlib can be hard to structure, style, and export consistently. This skill guides chart design, figure layout, styling, troubleshooting, and export choices.
Build Python Tests with pytest TDD
by 89jobrien
Python teams often need consistent tests, coverage, and reports without losing TDD discipline. This skill provides pytest-focused workflows, examples, and reporting guidance for Claude, Codex, and Claude Code.