Fd Find

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

A mistaken or overly broad search combined with rm, cp, or another command could delete or modify more files than intended.

Why it was flagged

The skill documents fd workflows that execute commands over search results, including deletion. This is a legitimate fd capability, but it can modify or remove many local files if used with an overly broad pattern.

Skill content
fd -e log -0 | xargs -0 rm ... fd --changed-before 30d -t f -x rm {}
Recommendation

Preview matches before using -x, xargs, rm, or other mutating commands, and require explicit user approval for destructive operations.

What this means

The behavior depends on the fd binary installed on the user's machine.

Why it was flagged

The skill relies on an externally installed fd binary from a package manager. This is expected for a CLI wrapper skill and no unsafe installer script is shown.

Skill content
brew | formula: fd | creates binaries: fd
Recommendation

Install fd from a trusted package manager or source and keep it updated.