v1.0.1

Ollie File Processor

BenignClawScan verdict for this skill. Analyzed May 1, 2026, 8:25 AM.

Analysis

The skill appears to do what it claims—local file renaming and format conversion—but it can change user files and relies on manually installed conversion dependencies.

GuidanceThis skill is reasonable for local batch renaming and file conversion. Before installing or using it, plan to preview rename operations, back up important files, use explicit paths, and install third-party conversion dependencies only from trusted sources.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Abnormal behavior control

Checks for instructions or behavior that redirect the agent, misuse tools, execute unexpected code, cascade across systems, exploit user trust, or continue outside the intended task.

Tool Misuse and Exploitation

SeverityLowConfidenceHighStatusNote

scripts/rename_files.py

if confirm.lower() == 'y':
                for old_path, new_path in self.rename_operations:
                    old_path.rename(new_path)

The script can batch-rename local files, which is the stated purpose and includes a confirmation prompt, but it is still a direct mutation of user files.

User impactChoosing the wrong directory or rename pattern could change many filenames and be hard to undo.

RecommendationUse dry-run first, inspect the preview carefully, back up important files, and only run against explicitly intended directories.

Agentic Supply Chain Vulnerabilities

SeverityLowConfidenceHighStatusNote

SKILL.md

Pillow: 图片处理 (`pip install Pillow`)
- pdf2image: PDF 转图片 (`pip install pdf2image`)
- docx2pdf: DOCX 转 PDF (`pip install docx2pdf`)
- markdown + weasyprint: Markdown 转 PDF (`pip install markdown weasyprint`)

The skill documents manual installation of third-party packages needed for its conversion features; this is purpose-aligned but introduces normal dependency provenance considerations.

User impactInstalling these packages adds third-party code to the local Python environment.

RecommendationInstall only the dependencies needed for the requested conversion, prefer a virtual environment, use trusted package sources, and pin or verify versions where possible.