Detect File Type - Local
v0.2.0Local, offline AI-powered file type detection — no network, no API keys
⭐ 1· 384·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
Name, description, and required artifacts line up: it needs python3 and the magika dependency to perform local file-type detection. The listed install package matches the project and the CLI entrypoint is coherent with the stated purpose.
Instruction Scope
SKILL.md and CLI code stick to reading file bytes, stdin, and formatting output; no instructions reference unrelated files, env vars, or network endpoints. Note: default stdin handling spools input to a temporary file (deleted after use), which can consume disk for large/abused streams; the code and SECURITY.md call this out. This behaviour is within scope but operationally relevant.
Install Mechanism
Install uses a PyPI-style package (uv -> detect-file-type-local) and pyproject.toml declares the dependency on magika. There are no downloads from obscure URLs, no extract-from-URL steps, and the package appears packaged for standard Python installation.
Credentials
The skill requires no environment variables or credentials. One caveat: the skill depends on the third-party magika package; the skill's docs claim inference and model are embedded/offline, but the runtime behavior of the magika package (e.g., whether it attempts network access to fetch models on first run) is not governed by this skill. Verify magika's docs/source if you need a strict offline guarantee.
Persistence & Privilege
The skill does not request always:true, does not persist across other skills, and runs with caller permissions. Temporary files are created for stdin spool mode and removed; no system-wide configuration changes are performed.
Assessment
This skill appears to do what it says: local file-type detection using Google Magika. Before installing, consider: 1) Verify the magika dependency's behavior (some ML libraries may download models or telemetry on first run) if you require a provably offline tool. 2) Be cautious when piping untrusted, very large streams into stdin: default mode spools to a temp file (the project documents this) which can consume disk; use --stdin-mode head with a conservative --stdin-max-bytes for untrusted inputs. 3) Install from PyPI or a vetted source and pin versions (pyproject pins magika range). 4) Run the tool in a sandbox or CI environment first if you need higher assurance, and inspect the magika package/source for network calls or hidden behaviors. Overall the package is internally consistent with its stated purpose, but verify the third-party dependency for an absolute offline guarantee.Like a lobster shell, security has layers — review code before you run it.
latestvk97a196y5f7dmp14848ckphvcs81wq7q
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
Binspython3
Install
uv
Bins: detect_file_type
uv tool install detect-file-type-local