folder-curator
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEPERSISTENCECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [PERSISTENCE]: The skill provides detailed instructions and systemd user unit templates (
curator-drain.service,sync-jim-dropbox.service, and associated timers) to establish persistent background processes for automated file curation and remote synchronization. - [COMMAND_EXECUTION]: The
folder_curator.pyscript utilizessubprocess.runto invoke external binaries and CLI tools, includinggitfor repository management,mc(MinIO Client) for S3 archival,pdf2mdfor document conversion, andbb-emitfor NATS-based event notification. - [DYNAMIC_EXECUTION]: The skill includes a
servecommand that launches aThreadingHTTPServer. This server exposes the engine's core logic (planandapply) as an unauthenticated HTTP API on127.0.0.1, enabling external services like n8n to trigger local file system operations. - [EXTERNAL_DOWNLOADS]: The Python scripts (
folder_curator.pyandcurator-drain.py) leverageuv runwith PEP 723 inline metadata to automatically fetch and install dependencies such asPyYAMLandnats-pyfrom the Python Package Index (PyPI) at runtime. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process files from external sources (e.g., Google Drive) where malicious content or frontmatter could influence agent classification and routing decisions.
- Ingestion points: Incoming files in the watched directory, synchronized from external sources via
rclone(documented inreferences/drive-sync.md). - Boundary markers: Utilizes standard YAML frontmatter delimiters (
---) as seen inscripts/folder_curator.pyto separate metadata from body content. - Capability inventory: Performs file moves, renames, and writes; archives content to S3 via
mc; and emits events viabb-emit. - Sanitization: Employs
slugifyfor destination names andyaml.safe_loadfor metadata parsing to mitigate some injection risks.
Audit Metadata