File Search
Security checks across malware telemetry and agentic risk
Overview
This is a simple local file-search skill using standard fd and ripgrep commands, with the main caution that searches may reveal local file names or contents if run on sensitive folders.
This skill appears safe and purpose-aligned for local file searching. Before installing or using it, make sure fd and ripgrep come from trusted repositories, and avoid pointing searches at folders that may contain passwords, private documents, or other sensitive information unless you intend those matches to be visible to the agent.
VirusTotal
63/63 vendors flagged this skill as clean.
Risk analysis
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Search results may bring local file names or matching file contents into the agent conversation.
The skill demonstrates searching local file contents with ripgrep. This is expected for a file-search skill, but it can reveal private information if run against sensitive directories.
rg "TODO|FIXME" /home/xrx/projects
Use the skill only on intended folders and avoid running broad searches over directories that may contain secrets, credentials, or personal data.
Installing packages changes the local system and relies on the configured OS package repositories.
The install instruction uses the system package manager to install required binaries. This is purpose-aligned and user-directed, but it is still a privileged setup action.
sudo dnf install fd-find ripgrep
Install fd-find and ripgrep from trusted repositories and review package-manager prompts before approving the installation.
