Back to skill
Skillv1.0.0
ClawScan security
Batch File Renamer · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignMar 3, 2026, 1:36 PM
- Verdict
- benign
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- This instruction-only skill provides Python examples for batch-renaming files and its requirements and actions are consistent with the stated purpose; it does file-system–modifying operations locally but requests no credentials or external installs.
- Guidance
- This skill is coherent and contains useful local Python examples, but they perform destructive file operations: always run the preview/dry-run first, back up important data, and test patterns on a small sample. Be aware the examples lack collision detection, exception handling, checks for symlinks, and permission/error handling — consider adding safeguards (unique-name checks, try/except around os.rename, handling name collisions) before running on large directories. If you prefer an installable tool, look for a trusted source or packaged implementation rather than copy-pasting unvetted code from an unknown source.
Review Dimensions
- Purpose & Capability
- okThe name and description (batch rename, regex, preview) match the SKILL.md content. All code examples and guidance relate directly to renaming, numbering, timestamps, and preview/dry-run behavior. No unrelated binaries, credentials, or config paths are requested.
- Instruction Scope
- noteThe instructions contain concrete Python code that performs local filesystem operations (os.listdir, os.rename) — which is appropriate for a renamer. The SKILL.md explicitly recommends preview and backups and provides a dry-run example. Note: the examples do perform destructive local changes when dry_run=False and do not include collision checks, permission handling, or exception handling; that is a correctness/safety concern but not scope creep.
- Install Mechanism
- okThere is no install spec and no code files beyond SKILL.md, so nothing is written to disk by an installer. This low-install surface is proportionate for an instruction-only utility.
- Credentials
- okThe skill declares no required environment variables, credentials, or config paths and the instructions do not reference external secrets or unrelated environment state. This is proportionate to the stated functionality.
- Persistence & Privilege
- okThe skill is not always-enabled and does not request elevated or persistent system presence. It does not modify other skills or system-wide agent settings.