File Manager Secure

• Outcome: Review
• Latest audit: May 29, 2026 at 9:30 PM UTC
• Version:
  1.0.0

Overview

This local file-management skill is not malicious, but its safety claims are undercut by restore and delete-confirm paths that can write or move files without rechecking the workspace boundary.

Review before installing or using on real files. Keep OPENCLAW_WORKSPACE narrow, do not restore from trash metadata you did not create and trust, and avoid passing hand-written operation JSON to delete-confirm unless you have verified every source path.

SkillSpector

By NVIDIA

Vulnerability Patterns

• MCP Tool Poisoning: Hidden Instructions, Unicode Deception, Parameter Description Injection
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Intent-Code Divergence

High

• Confidence: 98% confidence
• Finding: restore_from_trash reads original_path from a .trashmeta file and moves the trashed file there without re-validating that the destination is inside the allowed workspace. If an attacker can modify or plant metadata in the trash directory, they can cause writes to arbitrary filesystem locations reachable by the process, undermining the module's claimed data-loss-prevention guarantees.

VirusTotal

62/62 vendors flagged this skill as clean.