视觉系文件分类大师 (Visual File Sorter)
AdvisoryAudited by Static analysis on Apr 30, 2026.
Overview
No suspicious patterns detected.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Files in Downloads or Desktop could be renamed or moved in bulk in a way that is hard to undo or that breaks user workflows.
The declared filesystem write scope is only the Sorted directory, but the workflow tells the agent to use shell commands to rename and move files from Downloads/Desktop. Shell use can bypass the apparent scoped filesystem boundary, and no approval or rollback is specified.
permissions: filesystem: read: ["~/Downloads", "~/Desktop"] write: ["~/Documents/Sorted"] ... shell: allowed: true ... 使用 Shell 命令执行重命名 ... 将重命名后的文件移动
Require a dry-run plan, per-file confirmation, collision handling, and a rollback manifest before performing shell-based renames or moves.
A malicious or unsafe downloaded file could be launched during sorting instead of merely inspected.
The skill instructs the agent to open every queued file with the operating system default handler. In Downloads/Desktop, that may include executables, installers, scripts, macro-enabled documents, or other active content.
针对队列中的每一个文件...使用操作系统的默认程序或命令（如 Mac 的 `open`，Windows 的 `start`）打开该文件。
Skip executable and active-content file types by default, use safe preview/parsing methods where possible, and ask the user before opening any file that can run code.
Private details from invoices, contracts, images, or other desktop/downloaded files may be processed by the model and reflected in filenames.
The skill intentionally has the agent visually inspect broad local folders and extract metadata from potentially sensitive documents. This is purpose-aligned, but the artifacts do not define exclusions, retention behavior, or whether the default vision channel is local or remote.
使用你的屏幕视觉能力...截取当前屏幕，阅读并理解文件内容...提取关键元数据（如发票日期、公司名称、主要内容）
Run it only on folders you are comfortable having inspected, exclude sensitive files first, and prefer a local/private vision model if confidentiality matters.