Files
v1.0.0Safely organize, deduplicate, and analyze files with intelligent bulk operations and full undo support.
⭐ 4· 2k·16 current·16 all-time
byIván@ivangdavila
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
medium confidencePurpose & Capability
Name/description (organize, dedupe, analyze files) aligns with the instructions: duplicate detection, batch moves/renames, undo, disk analysis. No unexpected external services or credentials are requested.
Instruction Scope
The SKILL.md contains internal contradictions and scope creep: the header states 'NO: Open files, create files/folders' but later sections require reading file contents (hashing), writing undo records (~/.local/share/file-organizer/undo/*.json), writing a hash cache (~/.local/share/file-organizer/hash-cache.db), and creating .file-organizer-manifest.json in destinations. These are file I/O and file creation operations that conflict with the stated 'NO' list. The doc also references using an external 'trash' CLI on macOS/Linux and OS APIs on Windows; these runtime behaviors are not declared elsewhere and need clarification. Overall the instructions are detailed and careful about safety, but the contradictory statements about what it will and will not do are a significant coherence problem.
Install Mechanism
This is instruction-only (no install spec, no code files), which is lowest-risk from an installation perspective. However, the instructions rely on OS facilities (native trash) and mention the 'trash' CLI for macOS/Linux without declaring it as required; the skill should clarify fallback behavior and whether it will attempt to install or call an external binary not present on the system.
Credentials
No environment variables, credentials, or external configuration are requested. File and directory access is limited to user home and explicitly allowed directories per the policy in SKILL.md, which is proportionate to the stated purpose.
Persistence & Privilege
The skill will persist metadata and operational state to user-writable locations (e.g., ~/.local/share/file-organizer/, a hash-cache SQLite DB, and destination .file-organizer-manifest.json), and will move files to the OS trash or a local trash directory. It does not request elevated privileges and is not always-enabled, but users should be aware it will create and maintain on-disk records and caches in their home directory.
What to consider before installing
This skill looks like a reasonable file-organizer tool, but ask the owner/author to clarify two things before installing or running it: (1) The SKILL.md header says it will not open or create files, yet the instructions explicitly describe reading files for hashing and writing undo/manifest/cache files — decide whether you accept these on-disk writes and reads. (2) It references an external 'trash' CLI on macOS/Linux without declaring it; confirm what happens if that binary is missing and whether the skill will call or attempt to install external tools. Also note the skill will read many files when deduplicating (including hashing file contents) and will create records in ~/.local/share/file-organizer/ and manifests in destinations — back up important data before large operations and verify prompts/confirmations are enforced for bulk actions (>10 files, >100k files). If the author can remove the contradictory 'NO' statements and explicitly document required binaries/fallbacks, this assessment would become more confident (likely benign).Like a lobster shell, security has layers — review code before you run it.
latestvk97axfr91ya547kjhsk0xrzkxs80y21t
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
📁 Clawdis
OSLinux · macOS · Windows