Hash

Generate MD5 and SHA checksums, verify integrity, and compare hash values. Use when computing checksums, verifying downloads, or comparing hash outputs.

Security Scan

The skill's code and instructions match its described purpose (compute and verify hashes); it has no network calls or extra credential requests, but it does persist operation history and manifests under the user's home directory.

Purpose & Capability

The name/description ('Hash' — compute/verify checksums) align with the included script and SKILL.md. The script implements md5/sha1/sha256/sha512, verify, compare, batch, check, and history commands; required tools (md5sum/sha256sum/openssl) are reasonable and consistent with the stated purpose.

Instruction Scope

SKILL.md only instructs the agent to run the bundled script with the listed commands. The script operates only on files or provided text, detects algorithms by hash length, and verifies/computes hashes. It does not attempt to read arbitrary system credentials or call external endpoints. It does, however, log operations and write manifests to a data directory in the user's HOME (see persistence note).

Install Mechanism

No install spec or remote downloads; this is an instruction-only skill with a bundled shell script. No external packages are fetched during install, so there is low install-time risk.

Credentials

The skill requests no environment variables or credentials. It does require a POSIX environment with bash and common hash utilities (documented requirement: bash 4.0+). No unrelated secrets or config paths are requested.

Persistence & Privilege

The script creates and writes to ${HOME}/.local/share/hash, storing history.log and batch manifests containing file paths and hash values. This persistent logging is proportional to the tool's purpose but could expose sensitive file names or hashes if others can access your home directory; the skill does not modify other skills or system-wide configurations and is not always-enabled.

Assessment

This skill appears to do what it says: compute and verify hashes locally. Before installing, note that it will create ~/.local/share/hash and write history.log and batch manifest files containing file paths and hash values. If you will hash sensitive files, consider: review the script (provided), run it as an unprivileged user, inspect or delete ~/.local/share/hash/history.log and manifests after use, and limit their file permissions (e.g., chmod 600). No network calls or credential requests were found. If you need a different data location, modify DATA_DIR in the script before use.

Hash & Checksum Tool.

Commands

md5

Compute MD5 hash

scripts/script.sh md5 <file_or_text>

sha1

Compute SHA-1 hash

scripts/script.sh sha1 <file_or_text>

sha256

Compute SHA-256 hash

scripts/script.sh sha256 <file_or_text>

sha512

Compute SHA-512 hash

scripts/script.sh sha512 <file_or_text>

verify

Verify a file against a known hash

scripts/script.sh verify <file> <expected_hash>

compare

Compare hashes of two files

scripts/script.sh compare <file1> <file2>

batch

Hash every file in a directory (default: sha256)

scripts/script.sh batch <directory> [algo]

check

Verify hashes listed in a checksum file

scripts/script.sh check <hashfile>

history

Show recent hash operations

scripts/script.sh history

Requirements

• bash 4.0+

---

Powered by BytesAgain | bytesagain.com | [e-mail]