Archive Tool

• Risk level: Low
• Analyzed: Mar 4, 2026, 1:53 PM
• Findings: 0
• Version: 1.1.0

Overview

The skill implements an archive creation/listing/extraction utility that matches its description and only requires local Python and (optionally) system tools for rar/7z; nothing in the package attempts network access or to read unrelated credentials or configs.

This package appears to be what it says: a local archive utility implemented in Python. Before installing/using it: (1) inspect or run the script only on trusted archives — the extractor does not sanitize filenames and can overwrite arbitrary paths (zip-slip) if given a malicious archive; (2) if you need rar/7z support, install 'unar' and 'p7zip' from your OS package manager (avoid random third-party binaries); (3) run the tool in a restricted/sandboxed environment or on copies of archives when dealing with untrusted sources; (4) no network access or secret exfiltration was found, but you should still review the script yourself if you have specific security concerns.