File Launcher

ReviewAudited by ClawScan on May 10, 2026.

Overview

This skill has a clear file-opening purpose, but it tells the assistant to open any file or launch programs without confirmation.

Only install this if you are comfortable with the assistant opening local files and starting applications. Before using it, set a rule that the assistant must confirm the exact file path or program name first, and avoid opening unknown downloads, executables, scripts, or sensitive documents.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Medium

#ASI02: Tool Misuse and Exploitation

What this means

The assistant could open local files or start programs without a separate confirmation step, which may run unsafe handlers, expose private content on screen, or trigger application side effects.

Why it was flagged

Invoke-Item can open files through OS handlers and can also launch programs; telling the assistant not to wait for confirmation makes this broad local action under-scoped.

Skill content

The assistant will use `Invoke-Item` to open files
- No need to wait for confirmation as Windows programs are UI-based
- Opens any file for which Windows has a default player or program to manage it

Recommendation

Require explicit user confirmation before opening files or launching programs, restrict to user-specified paths and trusted file types, and avoid using it for executables, scripts, downloads, or unknown files.