file-organizer
Pass
Audited by Gen Agent Trust Hub on Jun 1, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a local Python script (
scripts/organize.py) to perform filesystem operations including moving files and deleting duplicates. This is the primary intended functionality of the tool. - [PROMPT_INJECTION]: The skill has a potential surface for indirect prompt injection because it processes untrusted local file system data (filenames and file content). However, the risk is negligible as the script does not feed file contents back to the agent as instructions.
- Ingestion points: Reads directory listings and file streams (for hashing) via
scripts/organize.py. - Boundary markers: Absent; the tool operates directly on files in the target directory.
- Capability inventory: Includes file movement (
shutil.move) and deletion (os.remove) capabilities. - Sanitization: None; file data is used for logic but not interpolated into prompts or executed as code.
Audit Metadata