File Converter

File format converter. Detect formats, convert between JSON/YAML/XML/CSV/Markdown, minify and prettify code. Commands: detect, json2yaml, yaml2json, csv2md.

Security Scan

The skill's files and runtime instructions are consistent with a local file-format conversion utility and do not request credentials or make network calls; minor documentation/organization issues exist but nothing appears malicious.

Purpose & Capability

The skill name/description (file format conversions) matches the provided scripts: they implement JSON/YAML/XML/CSV/Markdown conversions, minify/prettify, encoding, and file inspection. Minor incoherences: SKILL.md claims data is stored under ~/.file-converter/ but I found no code writing to that path, and there are two overlapping scripts (scripts/script.sh and scripts/convert.sh) with partly duplicated command sets which could cause confusion about which script the agent will run.

Instruction Scope

SKILL.md instructs the agent to run bundled shell scripts which operate on local files and use Python and standard Unix utilities. The scripts do not read unrelated system files, do not call external network endpoints, and do not reference credentials or other secrets.

Install Mechanism

There is no install spec (instruction-only), and the bundle includes only local shell and Python scripts. No downloads, package installs, or archive extraction are requested.

Credentials

No credentials or sensitive environment variables are required. SKILL.md lists an optional FILE_CONVERTER_DIR variable (default ~/.file-converter/), but the scripts do not appear to use or write to that directory — this is a documentation/config mismatch rather than a credential request.

Persistence & Privilege

The skill does not request permanent presence (always:false). It does not modify other skills or system-wide configuration. Agent autonomous invocation is allowed by default (normal) and not combined with other red flags.

Assessment

This skill appears to be a local file conversion toolkit and does not request credentials or make network calls. Before installing: (1) note there are two bundled scripts with overlapping commands — verify which script your agent will execute; (2) the README mentions a data directory (~/.file-converter/) but the code does not write there — if you expect persistent storage, inspect/modify the scripts; (3) there is a small bug/comment in cmd_base64_dec (it currently does not perform decoding) — test commands on non-sensitive sample files first; and (4) because the skill executes shell and Python code on files you provide, avoid running it on highly-sensitive files unless you review the scripts or run them in a sandbox.

File format utility — pretty-print or minify JSON, encode/decode URLs, hex dump files, detect file types, and show file statistics.

Commands

pretty-json

scripts/script.sh pretty-json

minify-json

scripts/script.sh minify-json

url-encode

scripts/script.sh url-encode

url-decode

scripts/script.sh url-decode

hex

scripts/script.sh hex

detect

scripts/script.sh detect

stats

scripts/script.sh stats

help

scripts/script.sh help

version

scripts/script.sh version

Examples

scripts/script.sh pretty-json
scripts/script.sh minify-json
scripts/script.sh help

Configuration

Variable	Required	Description
FILE_CONVERTER_DIR	No	Data directory (default: ~/.file-converter/)

Data Storage

All data saved in ~/.file-converter/. Runs entirely on your machine.

Requirements

• bash 4.0+
• Standard Unix tools (grep, sed, awk)

---

Powered by BytesAgain | bytesagain.com | [e-mail]