扫描报告
5 /100
tvs-cc-migrator
Claude Code 配置迁移工具 — 备份和恢复 ~/.claude/ 下的所有配置
A well-documented, legitimate Claude Code configuration backup/migration tool with proper sensitive data handling, no network exfiltration, and accurate doc-to-code alignment.
可以安装
No action needed. The skill is safe to use.
| 资源类型 | 声明权限 | 推断权限 | 状态 | 证据 |
|---|---|---|---|---|
| 文件系统 | READ | READ | ✓ 一致 | backup.mjs:26 — reads ~/.claude/ via readdirSync/readFileSync |
| 文件系统 | WRITE | WRITE | ✓ 一致 | backup.mjs:29 — writes to user-specified output dir via copyFileSync/mkdirSync |
| 命令执行 | WRITE | WRITE | ✓ 一致 | backup.mjs:393-397 — tar/powershell zip for local archiving only |
目录结构
3 文件 · 32.0 KB · 879 行 JavaScript 1f · 632L
Markdown 2f · 247L
├─
▾
scripts
│ └─
backup.mjs
JavaScript
├─
RESTORE_GUIDE.md
Markdown
└─
SKILL.md
Markdown
安全亮点
✓ SKILL.md fully documents all behavior including shell usage, file operations, and sensitive field handling
✓ No network requests — all operations are purely local filesystem work
✓ Sensitive credentials (env.TOKEN, env.SECRET, etc.) are actively detected and user is offered options to clear them before backup
✓ Proper exclusion list prevents backup of runtime/session data (.session-stats.json, sessions/, history.jsonl, cache/, etc.)
✓ Restore process is human-guided (user confirms each step), not auto-executed
✓ Uses standard OS tools (tar/powershell Compress-Archive) for archiving — no custom obfuscated payloads
✓ No access to sensitive system paths like ~/.ssh, ~/.aws, or .env files outside ~/.claude/
✓ Code is clean — no eval(), atob(), base64 decode, or dynamic command construction