file-manager
Pass
Audited by Gen Agent Trust Hub on Mar 5, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The
skill.pyscript includes functions to move files (shutil.move) and delete files (file.unlink). These capabilities are the core functionality of the 'organize' and 'cleanup' commands respectively, intended for managing log files and directories. - [PROMPT_INJECTION]: The skill has a surface for indirect prompt injection as it reads and displays filenames from the local filesystem that could contain malicious instructions intended for the agent.
- Ingestion points: The
list_filesandfind_duplicatesfunctions inskill.pyread filenames usingpath.globandpath.rglob. - Boundary markers: None; filenames are printed directly to the standard output without delimiters.
- Capability inventory: The skill has the ability to delete files (
file.unlink) and move files (shutil.move) across the filesystem. - Sanitization: No sanitization or filtering of file names is performed before they are output to the agent.
Audit Metadata