File Search

Security checks across malware telemetry and agentic risk

Overview

This is a simple local file-search skill using standard fd and ripgrep commands, with the main caution that searches may reveal local file names or contents if run on sensitive folders.

This skill appears safe and purpose-aligned for local file searching. Before installing or using it, make sure fd and ripgrep come from trusted repositories, and avoid pointing searches at folders that may contain passwords, private documents, or other sensitive information unless you intend those matches to be visible to the agent.

VirusTotal

63/63 vendors flagged this skill as clean.

View on VirusTotal

Risk analysis

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

#
ASI02: Tool Misuse and Exploitation
Low
What this means

Search results may bring local file names or matching file contents into the agent conversation.

Why it was flagged

The skill demonstrates searching local file contents with ripgrep. This is expected for a file-search skill, but it can reveal private information if run against sensitive directories.

Skill content
rg "TODO|FIXME" /home/xrx/projects
Recommendation

Use the skill only on intended folders and avoid running broad searches over directories that may contain secrets, credentials, or personal data.

#
ASI04: Agentic Supply Chain Vulnerabilities
Info
What this means

Installing packages changes the local system and relies on the configured OS package repositories.

Why it was flagged

The install instruction uses the system package manager to install required binaries. This is purpose-aligned and user-directed, but it is still a privileged setup action.

Skill content
sudo dnf install fd-find ripgrep
Recommendation

Install fd-find and ripgrep from trusted repositories and review package-manager prompts before approving the installation.