Mkdir Tool

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If invoked on the wrong path, the agent could create unwanted directories or directory trees on the local filesystem.

Why it was flagged

The script creates directories at supplied paths. This is the skill's purpose, but it is still a local filesystem mutation that should be applied only to intended paths.

Skill content
os.makedirs(d, exist_ok=True) if args.parents else os.mkdir(d)
Recommendation

Use the skill for specific, intended project or workspace paths; consider confirming absolute, system, or sensitive paths before invocation.

What this means

A user expecting the tool to create private directories with a specific mode may be surprised when that option is unavailable.

Why it was flagged

The documentation advertises permission-mode support, but the included script only defines directory arguments and --parents/-p, so users should not rely on the advertised -m behavior.

Skill content
- `-m mode`: Set permission mode (e.g. 755)
Recommendation

Update the documentation or implementation before relying on this skill for permission-sensitive directory creation.