file-tidy

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow scans directories like Downloads, Desktop, and arbitrary user-named folders via the file_tidy.py CLI (file-tidy scan and file-tidy dupes), which ingest outsider-authored files and free text without prior item selection.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill organizes and files local files and documents on disk, handling items classified as finance (such as invoices) by moving them into a designated category folder. This represents indirect financial operations (organizing documents for downstream handling). As an indirect operation, no direct payment routing or control assessment is required.