Security audit
Security checks for vulnerabilities and agentic risk
This filesystem skill requests broad local file access, but its documented behavior is coherent with file listing, searching, analysis, and user-directed copying.
Install only if you want an agent-facing tool with read-write access to local files. Prefer dry runs before copy operations, verify destination paths carefully, and be cautious with --overwrite or broad recursive searches over private directories.
This markdown file documents a command that performs filesystem writes and allows --overwrite, which can affect user data. Although it mentions safety checks and dry-run support elsewhere, this command reference section does not explicitly warn that running copy without --dry-run or with --overwrite may modify existing files.
The example shows a live copy operation using --preserve but does not indicate that it will write files immediately or recommend a dry run first. For markdown files, user-facing descriptions should warn about behaviors that can affect user data or system state.
This JSON manifest is in scope for vague-trigger checks. The description 'Advanced filesystem operations - listing, searching, batch processing, and analysis' is broad and does not specify when the skill should or should not be invoked, which could contribute to overly loose activation in systems that rely on manifest text for routing.
The manifest keywords include very broad terms such as 'files', 'directories', 'search', and 'automation'. In trigger- or routing-based systems, such generic terms can cause accidental invocation because they overlap with everyday language and lack negative examples or contextual constraints.
No suspicious patterns detected.
