File History Tracker

• Risk level: Low
• Analyzed: Apr 23, 2026, 8:11 AM
• Findings: 0
• Version: 1.0.0

Overview

The skill's code, instructions, and requirements match its stated purpose (local file versioning) and do not request unrelated credentials or network access, but it will persist copies of any files you snapshot so treat sensitive files carefully.

This skill appears to do exactly what it claims: local, git-like snapshots of files. It does not contact external servers or request credentials. However, snapshots are stored on disk in a .fvsnap directory next to each tracked file and text file contents (up to 10MB) may be saved verbatim — so do not snapshot secrets, private keys, or credentials you would not want persisted. If you allow the agent to run this autonomously or ask it to 'snapshot my config files', limit its scope (specific paths) and review the .fvsnap contents afterwards. If you want extra assurance, inspect version_engine.js yourself or run the tool in a safe/test directory first. Note: SKILL.md uses a different internal slug (skylv-file-versioning) than the registry slug — this is likely benign but worth being aware of.