Skills
skills/webup/skills-cc/webup-buddy-reroll/Gen Agent Trust Hub

webup-buddy-reroll

Warn

Audited by Gen Agent Trust Hub on Apr 2, 2026

Risk Level: MEDIUMCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATION
Full Analysis
  • [COMMAND_EXECUTION]: Executes the claude --version command to verify that the installed version of Claude Code is compatible with the buddy system requirements (v2.1.89 or higher).
  • [EXTERNAL_DOWNLOADS]: Downloads the Bun runtime using npx -y bun from the npm registry (a well-known package repository) to perform high-performance hashing calculations.
  • [DATA_EXFILTRATION]: Reads and modifies the ~/.claude.json configuration file to update the userID and clear the companion field. While this is the stated purpose of the skill, it involves modifying a sensitive application configuration file and replacing the user's unique installation identifier used for telemetry and identity.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Apr 2, 2026, 08:51 AM