file-organizer
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes several standard shell commands to perform its core functions. It uses
ls,find,du, andfilefor directory analysis and metadata gathering. It usesmkdirandmvfor restructuring the file system. These operations are restricted to the local file system and are directly related to the skill's stated purpose as a file organizer. - [INDIRECT_PROMPT_INJECTION]: The skill has a surface for indirect prompt injection as it processes untrusted data from the local environment.
- Ingestion points: The skill reads file names, sizes, and types from user-specified directories (e.g.,
Downloads,Documents) inSKILL.mdusing commands likels -laandfind [target_directory] -type f -exec file {} \;. - Boundary markers: No explicit boundary markers or instructions to ignore embedded content within file names or metadata are provided in the skill instructions.
- Capability inventory: The skill possesses the capability to modify the file system through
mkdirandmvcommands as defined in the 'Execute Organization' section ofSKILL.md. - Sanitization: No explicit sanitization or validation of file names or metadata is mentioned before the data is processed or used in the organization plan.
Audit Metadata