Security audit
Security checks for vulnerabilities and agentic risk
This is a filesystem help skill with disclosed search and batch file-operation examples, and I found no hidden execution, persistence, credential handling, or data exfiltration.
Install this only if you want the agent to use shell-style filesystem workflows. Before allowing batch edits, moves, or deletes, confirm the target directory and file list, prefer dry runs or backups, and avoid sudo or system directories unless you explicitly intend that level of access.
The skill description is very broadly worded and could activate for many normal file-related tasks, causing this powerful skill to be invoked more often than necessary. Because the skill includes destructive filesystem operations like move and delete, overbroad routing increases the chance of accidental misuse or unsafe autonomous execution.
The skill body is presented in Chinese while the manifest metadata is in English, and there is no indication that Chinese is optional or that the skill is region-specific. This creates a language/locale policy concern because the skill appears to impose a specific language without user opt-in.
Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.
- 考虑使用 `rm -i` 交互式删除
⚠️ **权限注意**：
- 某些操作可能需要 sudo
- 系统目录操作要谨慎
- 考虑文件权限问题
No suspicious patterns detected.