Elite CLI Tools

PassAudited by ClawScan on May 1, 2026.

Overview

This instruction-only skill is coherent for shell and file work, but it documents powerful commands that can edit, delete, or persistently change local settings if used without care.

This skill appears safe to install as an instruction-only CLI reference. Be careful with examples that use in-place edits, recursive operations, deletion, or global configuration changes; those should be run only after confirming the target files and intended impact.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Low

#ASI02: Tool Misuse and Exploitation

What this means

If an agent applies these examples too broadly, it could modify or remove local files or change a user-level Git setting.

Why it was flagged

The documentation includes examples that delete files, edit files in place, and make a persistent global Git configuration change. These are normal capabilities for a CLI/file-manipulation guide, but they can have real local impact if run without user intent.

Skill content

# Delete recursively
fdfind -H '\\.DS_Store$' -tf -X rm
...
yq -i '.database.port = 5432' config.yaml
...
git config --global diff.external difft

Recommendation

Use destructive, in-place, or global-configuration commands only when the user explicitly asks for them, and prefer preview or dry-run style commands before making changes.