file-sorter

No clear malicious behavior or malware is present. The code is a readable file-sorting utility with explicit destructive execution and reasonable scan-time safeguards. The main security weakness is authorization: crafted plan or undo JSON can cause file moves outside the intended scan root because apply_plan() and undo_plan() do not enforce containment of all source and destination paths. This is a security risk when plan files can be modified or supplied by an untrusted party.