downloads-command-center
PassAudited by ClawScan on May 1, 2026.
Overview
This skill appears to be a local Downloads-folder organizer that defaults to previewing changes before any file moves, with no evidence of hidden networking, credentials, or exfiltration.
This looks safe for its intended purpose, but treat it like any file-management tool: start with preview mode, confirm the exact Downloads folder, check the proposed moves carefully, and only then allow actual file movement.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If the user or agent runs the script with --apply, files in the selected folder can be moved into new subfolders.
The bundled helper can perform real local file moves when --apply is used. This is consistent with a Downloads organizer, but it is still a user-impacting action that should be previewed and confirmed.
ap.add_argument("--apply", action="store_true", help="Actually move files") ... shutil.move(str(item), str(target))Use the default preview mode first, inspect the generated move list, and only run --apply after confirming the target folder and plan.
Users may see inconsistent version information when comparing the registry entry with the bundled files.
The SKILL.md version differs from the registry metadata version 1.0.0 and CHANGELOG 1.0.0, which is a minor packaging coherence issue rather than evidence of unsafe behavior.
version: 1.1.0
Publisher should align registry metadata, SKILL.md, and CHANGELOG versions for clearer provenance and maintenance tracking.
