Security audit
Security checks for vulnerabilities and agentic risk
This skill locally sorts files into extension-named folders, which matches its stated purpose but should be used only on directories the user intends to reorganize.
Install only if you want a simple local file organizer. Run it on a specific directory you are comfortable reorganizing, and consider making a backup first because it moves files immediately and has no dry-run or undo feature.
The skill description tells users it will 'organize' files but does not clearly warn that it will move and reorganize files within the target directory, which can change filesystem state and disrupt workflows. Users may run it on important directories without understanding that files will be relocated, leading to confusion, broken references, or accidental mishandling of data.
The tool defaults to operating on the current directory and immediately moves files into extension-named subdirectories without any confirmation, dry-run mode, or safety prompt. In an agent or automation context, this can unintentionally reorganize a working directory, disrupt other tools, and cause operational data loss or confusion even though the behavior is not overtly malicious.
No suspicious patterns detected.
