zeh-local-inspector

PassAudited by ClawScan on May 1, 2026.

Overview

This skill transparently runs a small local script that only reports the current folder path and up to ten entry names, with no file changes or network use shown.

This appears safe and minimal for local directory inspection. Before using it, make sure you are comfortable revealing the current folder path and a short list of nearby file or folder names.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent may run a local script and return your current folder path plus up to ten file or folder names.

Why it was flagged

The skill asks the agent to execute a bundled local Python script. This is disclosed and purpose-aligned; the provided script only reads the current directory path and top-level entries.

Skill content
When inspection is needed, run:

python scripts/inspect_cwd.py
Recommendation

Use it only in directories where sharing the path and top-level names is acceptable, and review any future script changes before installing updates.