sync-sharekit-profile

sync-sharekit-profile is a skill for Claude Code from LucasSantana-Dev/sharekit. It costs 95 tokens per session (6,132 once invoked), scanned C, original, MIT.

A tool for copying a coding-agent setup into a public ShareKit profile repository, while removing personal paths and checking for secrets.

In plain words
What is it for?
It copies skills, hooks, standards, instructions, and agents, shows the changes, then commits and pushes the cleaned profile.
Why use it?
It helps share useful configuration without exposing private identity, machine details, or credentials.

Skill for Claude Code

Written for Claude Code: user-invocable in frontmatter. Also seen: reads .claude/ paths; mentions CLAUDE.md.

Good fit It copies skills, hooks, standards, instructions, and agents, shows the changes, then commits and pushes the cleaned profile.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/lucassantana-dev/sharekit/sync-sharekit-profile
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add LucasSantana-Dev/sharekit --skill sync-sharekit-profile
Clone the repo
git clone --depth 1 https://github.com/LucasSantana-Dev/sharekit

Made for: Claude Code.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for sync-sharekit-profile

README.md
[![agentmods](https://agentmods.dev/badge/skills/lucassantana-dev/sharekit/sync-sharekit-profile/github.svg)](https://agentmods.dev/skills/lucassantana-dev/sharekit/sync-sharekit-profile)
Your own site
<a href="https://agentmods.dev/skills/lucassantana-dev/sharekit/sync-sharekit-profile"><img src="https://agentmods.dev/badge/skills/lucassantana-dev/sharekit/sync-sharekit-profile/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for sync-sharekit-profile

Your own site · 80×15
<a href="https://agentmods.dev/skills/lucassantana-dev/sharekit/sync-sharekit-profile"><img src="https://agentmods.dev/badge/skills/lucassantana-dev/sharekit/sync-sharekit-profile.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 95 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 6,132 The whole file, excluding the scripts and references it only reads on demand.
Security scan C 1 finding. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00095 $0.06132
Opus 5 $0.00048 $0.03066
Sonnet 5 $0.00019 $0.01226
Haiku 4.5 $0.00010 $0.00613

Measured 6d ago against content hash 05911d3fa707, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-10, from the pricing page.

Security

Grade C, and why

sync-sharekit-profile scanned grade C with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 6d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Recursive force deletehighDestructive command

rm -rf with a variable or a broad path is one typo away from removing the wrong tree.

n="$(basename "$d")"; grep -qxF "$n" "$ALLOWLIST" || rm -rf "$d"
sharekit-profile/.claude/skills/sync-sharekit-profile/SKILL.md · 473 lines

How it starts

The opening of the file, as written. The whole thing — 473 lines — stays where its author put it; the contents beside it link to each section on GitHub.

sync-sharekit-profile

Mirror your live ~/.claude/ configuration into the public sharekit profile, so anyone running npx @lucassantana/sharekit install LucasSantana-Dev gets your latest setup.

The goal is to share what's genuinely useful to others — not your personal identity or machine-specific paths. That means copying broadly, sanitizing aggressively, and excluding anything that leaks personal context even after sanitization.


Variables

# Canonical public profile = the standalone sharekit-profile repo (ADR-0039: website + npm + manifest).
# The old sharekit/sharekit-profile/.claude mirror is legacy — do NOT target it.
# Resolve from env first; fall back to the operator default. Any operator can
# point this at their own clone — no personal path is required.
PROFILE_REPO="${SHAREKIT_PROFILE_REPO:-.}"
PROFILE_DIR="$PROFILE_REPO/claude"   # standalone uses claude/ (not .claude/)
SOURCE_DIR="$HOME/.claude"

Phase 0 — Reachability guard

# Generic: works for any operator clone, not just the original machine.
[ -d "$PROFILE_REPO/.git" ] || {
  echo "BLOCKED: profile repo not found at $PROFILE_REPO"
  echo "  set SHAREKIT_PROFILE_REPO to your clone of the profile repo and retry."
  exit 1
}

Phase 1 — Pre-sync status

Show what's changed since the last profile push:

git -C "$PROFILE_REPO" log --oneline -1
git -C "$PROFILE_REPO" status --short

Surface: last sync commit + date, any uncommitted profile changes already present. If there are open changes in the repo that aren't from this session, surface them and ask whether to proceed.


Phase 2 — Copy source files

CURATION ALLOWLIST (ADR-0039 / F1). The standalone profile is a curated subset, defined by curated-skills.txt in the profile repo (one skill name per line). This phase syncs ONLY those — a bare rsync --delete of all ~238 source skills would balloon the profile and destroy curation. Publishing a new skill = add a line to curated-skills.txt (a deliberate curation act). If the allowlist is missing, this phase REFUSES to run (no silent full-mirror).

Read the full file on GitHub · 473 lines

Files

What ships with it

1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 6d ago First seen · 473 lines · 95 tokens per session scan C 05911d3fa707

Subscribe to this mod's changes

sync-sharekit-profile is a skill published in the GitHub repository LucasSantana-Dev/sharekit (1 stars, last pushed 2d ago), licensed MIT. It adds 95 tokens to every session and 6,132 once invoked, about $0.0005 per session on Opus 5. A static security scan graded it C with 1 finding (recursive force delete). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.