file-organizer

Pass

Audited by Gen Agent Trust Hub on Oct 15, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes several standard shell commands to perform its core functions. It uses ls, find, du, and file for directory analysis and metadata gathering. It uses mkdir and mv for restructuring the file system. These operations are restricted to the local file system and are directly related to the skill's stated purpose as a file organizer.
  • [INDIRECT_PROMPT_INJECTION]: The skill has a surface for indirect prompt injection as it processes untrusted data from the local environment.
  • Ingestion points: The skill reads file names, sizes, and types from user-specified directories (e.g., Downloads, Documents) in SKILL.md using commands like ls -la and find [target_directory] -type f -exec file {} \;.
  • Boundary markers: No explicit boundary markers or instructions to ignore embedded content within file names or metadata are provided in the skill instructions.
  • Capability inventory: The skill possesses the capability to modify the file system through mkdir and mv commands as defined in the 'Execute Organization' section of SKILL.md.
  • Sanitization: No explicit sanitization or validation of file names or metadata is mentioned before the data is processed or used in the organization plan.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 15, 2026, 11:07 PM