Fd Find

PassAudited by VirusTotal on May 12, 2026.

Overview

Type: OpenClaw Skill Name: fd-find Version: 1.0.0 The skill bundle provides documentation and usage examples for the `fd` command-line utility. All instructions and code snippets demonstrate legitimate uses of `fd` for file searching and common file operations (e.g., copying, deleting, processing with other tools like `convert`, `wc`, `ripgrep`). There is no evidence of prompt injection against the agent, data exfiltration, malicious execution, or any other intentional harmful behavior. The installation instructions in `SKILL.md` use standard package managers (`brew`, `apt`).

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

A mistaken or overly broad search combined with rm, cp, or another command could delete or modify more files than intended.

Why it was flagged

The skill documents fd workflows that execute commands over search results, including deletion. This is a legitimate fd capability, but it can modify or remove many local files if used with an overly broad pattern.

Skill content
fd -e log -0 | xargs -0 rm ... fd --changed-before 30d -t f -x rm {}
Recommendation

Preview matches before using -x, xargs, rm, or other mutating commands, and require explicit user approval for destructive operations.

What this means

The behavior depends on the fd binary installed on the user's machine.

Why it was flagged

The skill relies on an externally installed fd binary from a package manager. This is expected for a CLI wrapper skill and no unsafe installer script is shown.

Skill content
brew | formula: fd | creates binaries: fd
Recommendation

Install fd from a trusted package manager or source and keep it updated.