vitya
965cdb788c
L0 11c-1: setup-projects-meta complete on field-test laptop
- 13 projects synced, MCP connected (14 tools), backup saved
- Surface 4 gaps for skills/bootstrap script:
* skill clones with token-in-URL on auth-failure retry → leaks into .git/config
* Bash tool runs git non-interactive — GCM not available
* fresh ~/.claude.json lacks mcpServers root key (skill added it OK)
* security: PAT exchanged via chat — user accepted leak (private gitea)
- Followup task: setup-projects-meta-token-leak in claude-skills/.tasks/
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>