Skip to main content

sgnk-snapshot

Captures schema-versioned JSON snapshots of production codebases, facilitating seamless handoffs and documentation.

Install this skill

or
45/100

Security score

The sgnk-snapshot skill was audited on Jul 27, 2026 and we found 9 security issues across 2 threat categories, including 1 high-severity. Review the findings below before installing.

Categories Tested

Security Issues

high line 46

Template literal with variable interpolation in command context

SourceSKILL.md
46`"${GVC_BASE_DIR:-$HOME/Desktop/GitHub}/<name>"`. If that's not a git repo, fall
medium line 71

Template literal with variable interpolation in command context

SourceSKILL.md
71```bash
medium line 124

Template literal with variable interpolation in command context

SourceSKILL.md
124```bash
medium line 246

Template literal with variable interpolation in command context

SourceSKILL.md
246```bash
medium line 40

Access to hidden dotfiles in home directory

SourceSKILL.md
40- `all` — iterate every repo in `~/.sgnk/GLOBAL-REGISTRY.md` (multi-repo);
medium line 47

Access to hidden dotfiles in home directory

SourceSKILL.md
47back to grepping `~/.sgnk/GLOBAL-REGISTRY.md` for any registered path whose
medium line 254

Access to hidden dotfiles in home directory

SourceSKILL.md
254- `all` mode: read `~/.sgnk/GLOBAL-REGISTRY.md`, then repeat steps 1–4 per repo,
medium line 23

Access to .env file

SourceSKILL.md
23secret-safe (they never read `.env*`). Hand-deriving git facts or re-emitting
medium line 266

Access to .env file

SourceSKILL.md
266safe** (never reads `.env*`/keys; `required_env` is NAMES only).
Scanned on Jul 27, 2026
View Security Dashboard
Installation guide →
Rate this skill
Categorydevelopment
UpdatedAugust 10, 2026
claudeclaude-codecursorcopilotwindsurffrontendsupabasestripedocxgitapitestingdevopsbackenddevops-srebackend-developerdata-engineerdevelopment
sagnikmitra/skills