Skills file-search

📦

file-search

Name: file-search
Author: 0xDarkMatter

Content revision r1 Medium Risk ⚡ Contains scripts⚙️ External commands

Find Files and Search Code Faster

Large codebases make file and text search slow. This skill provides fd, ripgrep, and fzf workflows for precise discovery and navigation.

Supports: Claude Codex Code(CC)

📊 75 Adequate

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "file-search" from https://skillstore.io/skills/0xdarkmatter-file-search.md and its manifest at https://skillstore.io/api/skills/0xdarkmatter-file-search/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/0xdarkmatter-file-search.md Signed manifest GET /api/skills/0xdarkmatter-file-search/manifest Signed lockfile GET /api/skills/0xdarkmatter-file-search/lockfile

Test it

Using "file-search". Find configuration files in a monorepo.

Expected outcome:

A scoped file search plan by name and extension.
Recommended exclusions for generated directories.
Next steps for narrowing results by path.

Using "file-search". Search for deprecated API usage.

Expected outcome:

A content search plan with context lines and counts.
A review-first workflow before any edits.
A summary of likely files to inspect.

Using "file-search". Open matching files interactively.

Expected outcome:

An fzf preview workflow for selecting files.
Editor navigation guidance for selected matches.
Safety notes for commands that can change files.

Security Audit

Medium Risk

v7 • 7/4/2026 Open versioned report

Most static findings are markdown examples or safe command documentation, including false positives from fenced code blocks. Confirmed risks are limited to destructive or broad file-changing shell workflows, and no prompt injection or data exfiltration evidence was found.

Files scanned

419

Lines analyzed

Review items

False positives ignored

Confirmed security concerns (1)

Medium

references/advanced-workflows.md:12-20 references/advanced-workflows.md:188-190

Unqualified Batch File Modification Guidance

The advanced workflows include batch formatting and rename operations without requiring previews, backups, or confirmation. An AI agent could apply broad repository changes if it follows them directly.

The cited examples use write and rename operations that can change many files. They are legitimate workflows, but the surrounding guidance does not require a dry run or explicit confirmation.

Capability review items (4)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

Medium

references/advanced-workflows.md:87

Shell command substitution

sd "old_function" "new_function" $(rg -l "old_function")

This replacement example writes changes to every file returned by rg and uses unquoted command substitution. It can modify unintended files when paths contain spaces or special characters.

Medium

references/advanced-workflows.md:153

xargs command (can execute arbitrary commands)

fd | fzf -m | xargs rm -i # Delete selected

The pipeline sends interactive fzf selections to rm -i, which is a real deletion workflow. The confirmation flag reduces risk but it can still remove project files if executed.

Medium

references/advanced-workflows.md:158

xargs command (can execute arbitrary commands)

xargs -p rm

This example pipes selected file paths into rm through xargs. xargs -p asks before execution, but the documented action is still file deletion.

Medium

references/advanced-workflows.md:197

xargs command (can execute arbitrary commands)

fd -e ts | rg -l "deprecated" | fzf -m | xargs rm

This workflow deletes selected TypeScript files with xargs rm and has no confirmation flag. It is a destructive command that could remove repository files.

Risk Factors

⚡ Contains scripts (1)

references/advanced-workflows.md:233

⚙️ External commands (40)

Audited by: codex View Audit History →

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Copy report link

https://skillstore.io/skills/0xdarkmatter-file-search/audits/7?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/0xdarkmatter-file-search/security.svg)](https://skillstore.io/skills/0xdarkmatter-file-search?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/0xdarkmatter-file-search?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/0xdarkmatter-file-search/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/0xdarkmatter-file-search.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

0xDarkMatter. (2026). file-search security audit report (audit version 7) [Author version unspecified]. Skillstore. https://skillstore.io/skills/0xdarkmatter-file-search/audits/7

BibTeX citation

@techreport{0xdarkmatter-0xdarkmatter-file-search-2026,
  author = {0xDarkMatter},
  title = {file-search security audit report (audit version 7)},
  institution = {Skillstore},
  year = {2026},
  number = {7},
  url = {https://skillstore.io/skills/0xdarkmatter-file-search/audits/7},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "file-search security audit report (audit version 7)"
version: "unspecified"
type: report
authors:
  - name: "0xDarkMatter"
date-released: "2026-07-04"
url: "https://skillstore.io/skills/0xdarkmatter-file-search/audits/7"
identifiers:
  - type: other
    value: "skillstore:0xdarkmatter-file-search:audit:7"
    description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: High

Architecture

Maintainability

Content

Community

Spec Compliance

What You Can Build

Repository Navigation

Find files by name, type, path, age, or size before opening the most relevant results.

Code Investigation

Search for symbols, TODO items, imports, and repeated patterns with context and counts.

Interactive Review

Use fzf previews to inspect matches, choose files, and prepare focused editor or git actions.

Try These Prompts

Find Matching Files

Use file-search to find Python files related to authentication. Show the search approach and explain each filter.

Search Code Safely

Search for TODO and FIXME entries in src. Include counts and context, and do not modify files.

Preview Search Results

Build an fzf workflow to search for API routes, preview matches, and open selected files in my editor.

Plan a Review Workflow

Create a safe fd, rg, and fzf plan for locating deprecated TypeScript APIs, reviewing matches, and staging only approved files.

Best Practices

Preview matches before running commands that modify files.
Scope searches to a path or file type before expanding to the full repository.
Use null-delimited pipelines or quoted variables when file names come from search output.

Avoid

Running deletion or rewrite commands from examples without checking selected files.
Using broad empty searches across the whole repository when a path or type filter is known.
Passing untrusted file names through xargs without safe delimiters or confirmation.