← 返回 Skills 市场
File Organizer Skill
作者
azzar budiyanto
· GitHub ↗
· v1.0.0
10365
总下载
4
收藏
62
当前安装
1
版本数
在 OpenClaw 中安装
/install file-organizer-skill
功能描述
Organize files in directories by grouping them into folders based on their extensions or date. Includes Dry-Run, Recursive, and Undo capabilities.
安全使用建议
Run --dry-run first, choose a narrow target folder, use --recursive deliberately, and only run --undo with an organize_history.json generated by this script from a folder you trust. Do not use undo logs from downloads, chat messages, or other people.
功能分析
Type: OpenClaw Skill
Name: file-organizer-skill
Version: 1.0.0
The `scripts/organize.py` skill is suspicious due to a critical file movement vulnerability in its `undo` functionality. The `undo` function takes a user-supplied `log_file` path without sufficient validation. This `log_file` is parsed as JSON, and its `src` and `dst` fields are directly used in `shutil.move(dst, src)`. An attacker could craft a malicious `organize_history.json` file containing arbitrary `src` and `dst` paths, allowing them to move any file on the system (e.g., `/etc/passwd` to `/tmp/backup` or vice-versa) by executing the skill with the `--undo` flag, leading to potential data tampering, denial of service, or privilege escalation.
能力评估
Purpose & Capability
Moving files into category or date folders is coherent with the stated file-organizer purpose; recursive mode can affect many files under the chosen directory.
Instruction Scope
The instructions disclose dry-run, recursive, audit history, and undo behavior, but they do not clearly warn that undo trusts the history file contents.
Install Mechanism
No install-time execution, remote download, dependency installation, or hidden setup behavior was found; the artifact contains documentation, a reference file, and one Python standard-library script.
Credentials
Local filesystem read/write access is expected for a file organizer and normal runs are scoped to the user-provided directory; no network, credential, or profile access was found.
Persistence & Privilege
The script writes organize_history.json in the target directory for undo, and the undo path reads and then deletes the provided log file after processing.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install file-organizer-skill - 安装完成后，直接呼叫该 Skill 的名称或使用
/file-organizer-skill触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
- Initial release of the File Organizer skill.
- Organize files by extension (default) or by date (year/month).
- Supports dry run mode to preview changes without moving files.
- Includes recursive scanning and undo functionality.
- Tracks actions in an organize_history.json file for audit and undo.
元数据
常见问题
File Organizer Skill 是什么？
Organize files in directories by grouping them into folders based on their extensions or date. Includes Dry-Run, Recursive, and Undo capabilities. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 10365 次。
如何安装 File Organizer Skill？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install file-organizer-skill」即可一键安装，无需额外配置。
File Organizer Skill 是免费的吗？
是的，File Organizer Skill 完全免费（开源免费），可自由下载、安装和使用。
File Organizer Skill 支持哪些平台？
File Organizer Skill 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 File Organizer Skill？
由 azzar budiyanto（@1999azzar）开发并维护，当前版本 v1.0.0。
推荐 Skills