A simple, fast and user-friendly alternative to 'find' Based on sharkdp/fd (42,080+ GitHub stars). file finder, rust, cli, command-line, filesystem, hacktobe...

This skill appears to be what it says: a CLI file-search utility implemented as a bash script with embedded Python. Before installing or running it: (1) verify license mismatch (SKILL.md: Apache-2.0 vs script header: MIT) and confirm you are comfortable with the stated copyright/terms; (2) be aware the script uses system 'find', 'stat', and Python3 — ensure those are present and acceptable; (3) avoid running it against sensitive directories or as root because it will read file metadata and, in duplicate mode, read portions of files; (4) if you require stricter guarantees, inspect the script yourself (it is short and readable) or run it in a confined environment. Overall there are no network exfiltration signs or unexplained credentials requested.

Type: OpenClaw Skill Name: file-finder Version: 1.0.0 The skill provides filesystem search utilities but contains multiple command injection vulnerabilities in 'scripts/file_finder.sh'. Specifically, user-provided arguments are directly interpolated into Python heredocs (e.g., target = "$dir"), which allows for arbitrary code execution if a directory name or parameter contains crafted shell/Python characters. While the behavior aligns with the stated purpose, these implementation flaws represent a high-risk surface for exploitation.