version-master
v2.1.1Intelligent single-file version management. Save, restore, diff, and clean file snapshots with per-file version history. Activate when users need version con...
⭐ 1· 131·0 current·0 all-time
byhanli@neuhanli
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
Name/description (single-file versioning: save, restore, diff, clean) align with the provided code and SKILL.md. The code implements expected behaviors (save_version, list_versions, restore_version, diff, clean) and the manifest does not request unrelated binaries or credentials.
Instruction Scope
Runtime instructions map to the included Python tool and show explicit call signatures. The SKILL.md allows AI 'auto-detection' of which file to save from context — this grants discretionary behavior to the agent and should be used carefully. Safety rules require explicit confirm=True for destructive ops; that is present in the docs and (partially) enforced by the API design.
Install Mechanism
There is no install spec and the skill is instruction + script files only. No external downloads, package installs, or remote code execution URLs are present in the bundle.
Credentials
The skill requires no environment variables or credentials, which is appropriate. However, it writes snapshot data into a global path under the user's home (~/.workbuddy/versions/version-master), meaning file contents are persisted outside the workspace — a privacy/data-protection consideration rather than a credentials mismatch.
Persistence & Privilege
Although the skill does not request elevated platform privileges and 'always' is false, it persists snapshots to the user's home and intentionally shares the storage across workspaces. This cross-workspace sharing can leak snapshots between projects; snapshots (including binary content) are stored long-term on disk. The skill does not modify other skills' configs, but the global storage footprint and cross-workspace accessibility are noteworthy.
Assessment
This skill appears to implement what it claims and does not ask for credentials, but it stores file snapshots in ~/.workbuddy/versions/version-master and exposes snapshots across workspaces. Before installing, consider: (1) Do you accept that versions (including binary content) are persisted outside the workspace in your home directory? (2) Do you want potentially sensitive files to be stored in a global location shared across projects? (3) Avoid allowing 'auto-detect' saves without explicit file paths; prefer to explicitly name files to save. If you need stronger isolation, run the tool in a sandboxed environment or modify the storage_path to a workspace-local directory. If you are unsure, review the full scripts/version_tool.py content in detail or run the code in a hermetic test workspace first.Like a lobster shell, security has layers — review code before you run it.
latestvk971rae565bqkkryrpykqvq15d83m88h
License
MIT-0
Free to use, modify, and redistribute. No attribution required.