解析压缩文件并根据文件名关键词自动分类到指定目录。每当用户需要处理压缩文件时，请使用此技能。触发条件包括：提及"解压"、"文件解压"等。也用于将文件根据用户指定的方法进行分类处理。如果用户要求解压文件并将文件按指定文件名进行分类，请使用此技能。
Security Analysis
high confidenceThe skill's code, instructions, and requirements are coherent with its stated purpose (unpacking archives and sorting files); it performs local file I/O and rule persistence but does not request credentials or network access.
Name/description match the provided files and CLI: the script extracts archives, matches filenames against stored rules in data/rules.json, and moves files to user-specified output directories. No unrelated capabilities (cloud access, credentials) are requested.
SKILL.md instructions only reference local operations (init, add/list/delete rules, classify, execute) and the script's CLI/Python API. The instructions tell the agent to extract archives to a temporary directory, preview results, ask for confirmation, then move files — this is within the stated scope. It does instruct users to edit data/rules.json for settings, which is expected for a rule-based local tool.
This is an instruction-only skill with a shipped Python script; there is no install spec. Dependencies for rar/7z support (py7zr, rarfile) are listed as optional and the script falls back to calling local 7z/unrar. This is proportional and documented.
No environment variables, credentials, or external config paths are requested. The script reads/writes only its own data/rules.json and operates on user-supplied archive and output paths — which matches the purpose.
Skill is not always-enabled and does not modify other skills or global agent settings. It persists user rules to its own data/rules.json (expected). The agent's autonomous invocation is allowed by default but is not combined with broad privileges here.
Guidance
This skill appears to do exactly what it claims: unpack archives, match filenames against local rules, and move files. Before using it: 1) run classify (preview) rather than execute to confirm results; 2) inspect and/or back up target directories so no important files are accidentally moved or overwritten; 3) review data/rules.json and the script if you want to verify behavior (the script includes path-traversal protections and skips symlinks/special files); 4) be aware that for .7z/.rar the script may call local 7z/unrar binaries if Python libs are absent — those calls execute local programs for decompression only; 5) only grant this skill access to archives and output directories you trust. If you want extra assurance, run the script manually outside the agent in a controlled environment first.
Latest Release
v1.0.2
file-sorter 1.0.2 - 文档补充归档解压的安全机制，新增“安全机制”章节：详细说明路径校验、拒绝危险成员、TAR特殊文件等防护措施。 - 错误类型说明中，ValueError 增加对有危险路径成员时的解释。 - 其余功能、代码未更改。
Popular Skills
Published by @zj-zc on ClawHub
