\r \r

Secure Folder Visualizer\r

\r This skill generates a self-contained, XSS-safe HTML report of a directory structure. It is optimized for the "Generate -> Send -> Cleanup" secure workflow.\r \r

Trigger Scenarios\r

• "Visualize the folder [path]."\r
• "Show me what's inside this directory."\r
• "Send a tree map of my project to Telegram."\r \r

Execute Command\r

node {baseDir}/file_lister.js "\x3Cdirectory_path>"\r
\r
```\r
\r
## Arguments & Sanitization (CRITICAL)\r
\r
* `\x3Cdirectory_path>`: The target folder path.\r
* **Sanitization Rule:** Before executing, you **MUST** sanitize this path. Remove or escape any shell-active characters: `;`, `&`, `|`, `(`, `)`, ```, `$`, `\x3C`, `>`, `\`.\r
* **Normalization:** Convert relative paths (like `.` or `./src`) to **Absolute Paths** to prevent directory traversal ambiguity.\r
* **Formatting:** Always wrap the sanitized absolute path in **double quotes** `""`.\r
\r
\r
## Expected Output & Next Actions\r
\r
1. **Expected Output:** The script will output the absolute path to the generated `.html` file.\r
2. **STRICT Execution Sequence:**\r
\r
* **Step 1 (Credential Check & User Guidance):**\r
  - **Check:** Before sending, verify if the `$TELEGRAM_BOT_TOKEN` environment variable is available.\r
  - **Action:** If the token is missing, you **MUST HALT**. Explicitly inform the user in natural language: "The Telegram Bot Token is missing." Then, briefly explain what it is (e.g., "This token is a unique password from BotFather that allows this system to securely send the report to your Telegram account"). Finally, instruct them to configure it as a system environment variable.\r
  - **Strict Rules:** 1. You must **NOT** output the raw code string `$TELEGRAM_BOT_TOKEN` or `TELEGRAM_BOT_TOKEN` in your response. \r
    2. Do **NOT** ask the user to paste the token into the chat (for security reasons). \r
    3. The target `chat_id` is automatically supplied within your active conversation context. You must extract and proceed directly with this contextual value without prompting the user for it.\r
\r
* **Step 2 (Deliver):** you must use `sendDocument` below to send the file at the returned path to the user, you have to execute this step referring to `sendDocument` below.\r
**sendDocument**\r
Use this to send raw files (PDFs, scripts, zips).\r
- Method: `POST` (multipart/form-data)\r
- Parameters:\r
  - `chat_id` (string/int): The target chat ID. Read this from the context now.\r
  - `document` (file): The file to upload, formatted as `@/path/to/file.zip` (must be an absolute path).\r
  - `BOT_TOKEN` (string): The Telegram bot token. Read this from the `$TELEGRAM_BOT_TOKEN` environment variable.\r
Example:\r
```bash\r
curl -s -X POST "https://api.telegram.org/bot\x3CBOT_TOKEN>/sendDocument" -F "chat_id=12345678" -F "document=@C:\Users\Username\Desktop\file.zip"\r
```\r
* **Step 3 (Cleanup):** REGARDLESS of success, immediately delete the file.\r
* *Windows:* `del "\x3Cpath>"`\r
* *Linux/macOS:* `rm "\x3Cpath>"`\r
\r
\r
* **Step 4 (Reply):** Inform the user: "The secure folder report has been sent and the local temp file has been purged."\r
\r
\r
\r
## Security Notes\r
\r
* **XSS Protection:** Filenames are automatically escaped in the HTML report.\r
* **Injection Defense:** The Agent is responsible for path sanitization per the rules above.\r
* **Privacy:** No data is uploaded to 3rd party servers; transfer is handled via secure Telegram API.\r