Skills DirectorySkills Directory
SkillsLearnSecurityCategoriesDocsCommunityBlog
Sign InSubmit Skill
Skills Directory

Security-tested agent skills for Claude, coding agents, and AI workflows.

Directory

  • Browse Skills
  • All Skills A–Z
  • Claude Skills
  • Claude Code Skills
  • Agent Skills
  • Categories
  • Authors
  • Submit a Skill

Learn

  • Learn Hub
  • Install Claude Skills
  • Write SKILL.md
  • Skills vs MCP
  • Directories Compared

Security

  • Security
  • Methodology
  • Secure Claude Skills
  • Security Badges

Company

  • About
  • Community
  • Blog
  • API Docs
  • Advertise

2026 Skills Directory. All rights reserved.

ProTermsPrivacyRefunds
Back to skills

Organize Deduplicate Analyze Files

ASecurity

Safely organize, deduplicate, and analyze files with intelligent bulk operations and full undo support.

19 stars
0 votes
0 copies
1 views
Added 9/19/2026
ai-agentsgoshellsqlnodeapisecurity

Works with

cliapi

Security Analysis

A92/100
mediumInstalls packages at runtime which could introduce malicious dependencies

Scanned 9/19/2026

Install to Claude Code

$npx -y skills add rondoflow/rondoflow --skill organize-deduplicate-analyze-files --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Organize Deduplicate Analyze Files?

Add the live security badge to your README — it updates automatically with every re-scan.

Security grade badge for Organize Deduplicate Analyze Files
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/rondoflow-organize-deduplicate-analyze-files/badge)](https://www.skillsdirectory.com/skills/rondoflow-organize-deduplicate-analyze-files)

More formats (shields.io, HTML) on the badges page.

Download with Pro
Files
SKILL.md
---
name: organize-deduplicate-analyze-files
description: "Safely organize, deduplicate, and analyze files with intelligent bulk operations and full undo support."
category: "Productivity"
author: community
version: "1.0.0"
icon: check-square
---

## What This Skill Does (and Doesn't)

**YES:** Organize existing files, find duplicates, analyze disk usage, batch rename/move, clean up clutter
**NO:** Open files, create files/folders, copy files, extract archives, basic file browsing — use standard file operations for those

This is a power tool for reorganization, not a replacement for basic file commands.

## Path Security (Non-Negotiable)

- Canonicalize ALL paths before any operation: resolve `..`, `~`, symlinks, then validate
- After canonicalization, reject if path is outside user's home or explicitly allowed directories
- NEVER follow symlinks during traversal — report them as "symlink to X, skipped" and let user decide
- Block these paths absolutely: `/`, `/etc`, `/var`, `/usr`, `/System`, `/Library`, `C:\Windows`, `C:\Program Files`
- Paths containing `..` after canonicalization = reject with explanation

## Fast Path vs Safe Path

**Fast path (1-9 files):** Execute immediately with brief confirmation: "Move 3 files to Archive? [Y/n]"
**Safe path (10+ files):** Create manifest, show summary, require explicit "yes" or review

This prevents confirmation fatigue for simple operations while protecting bulk actions.

## Trash Handling

- Use the operating system's native trash: `trash` CLI on macOS/Linux, Recycle Bin API on Windows
- If OS trash unavailable, move to `~/.local/share/file-organizer-trash/` with metadata sidecar
- Metadata sidecar (JSON): original path, deletion timestamp, operation ID — NOT path-in-filename
- Never permanently delete without explicit "permanently delete" or "empty trash" command

## Undo System

- Every operation creates an undo record in `~/.local/share/file-organizer/undo/TIMESTAMP.json`
- Record contains: operation type, source paths, destination paths, checksums of moved files
- "Undo last" reverses the most recent operation using the record
- Undo records expire after 30 days — warn user before expiry
- NO shell scripts for undo — JSON metadata only, executed by the agent

## Symlink Policy

- During directory traversal: skip symlinks, report them separately
- "This folder contains 12 symlinks pointing outside — review before proceeding?"
- Never follow symlinks automatically — they're a classic attack vector
- User can explicitly request "follow symlinks" but must confirm each external target

## Duplicate Detection (Scalable)

- Phase 1: Group by exact size (instant, no I/O)
- Phase 2: Hash first 4KB of same-size files (fast filter)
- Phase 3: Full hash only for files matching phase 2
- For >10,000 files, require confirmation: "This will take ~15 minutes. Proceed?"
- Cache hashes in `~/.local/share/file-organizer/hash-cache.db` (SQLite) with mtime invalidation

## Bulk Operations

- **Batch rename:** Preview ALL transformations if <50 files, first/last 10 if more, always show total count
- **Batch move:** Verify destination has space before starting, atomic per-file with rollback on error
- **Progress:** Update every 5% or 30 seconds, whichever is less frequent — not per-file spam
- **Error handling:** On ANY error, stop, report what succeeded/failed, offer "continue skipping errors" or "rollback completed"

## Organization Proposals

- Analyze directory contents FIRST, then propose: "80% images, 15% videos, 5% docs — organize by date or type?"
- Always show concrete examples: "vacation-photo.jpg → 2024/06-June/vacation-photo.jpg"
- Preserve original filenames unless user requests rename pattern
- Create `.file-organizer-manifest.json` in destination documenting the reorganization for future reference

## Size Analysis

- Top consumers by directory, not individual files — users think in folders
- Flag known safe-to-delete: node_modules, __pycache__, .gradle, build/, target/, Pods/
- Calculate actual vs apparent size (sparse files, hardlinks)
- For cleanup suggestions, always state recoverability: "Deleting node_modules: fully recoverable with npm install"

## Platform Specifics

- macOS: Respect .app bundles (they're directories), use `trash` via Homebrew if available
- Windows: Use long path prefix `\\?\` for paths >260 chars, use shell API for Recycle Bin
- Linux: XDG trash spec (`~/.local/share/Trash/`), handle different filesystem capabilities

## Limits and Failures

- Refuse operations on >100,000 files without explicit override: "This affects 250K files. Type 'I understand' to proceed"
- If manifest would exceed 10MB, paginate: "Showing batch 1 of 15 (page through with 'next')"
- Network drives: detect by response time, warn about reliability, suggest local copy first
- Disk full: check before starting, reserve 1% headroom, fail gracefully with partial completion report

Attribution

rondoflowrondoflow
View sourceMore from rondoflow →
SSkills DirectorySkills Directory

Your tool, in front of Claude Code builders.

3 founder slots · $299/mo · GSC-verified traffic · sponsors can never buy grades.

See placements

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments (0)

No comments yet. Be the first to comment!

SSkills DirectorySkills Directory

Your tool, in front of Claude Code builders.

3 founder slots · $299/mo · GSC-verified traffic · sponsors can never buy grades.

See placements

Related Skills

Caveman

Ultra-compressed communication mode that cuts output tokens while keeping technical accuracy. Levels: lite, full, ultra and the wenyan variants. Use for /caveman, "caveman mode", "talk like caveman", "be brief" or "less tokens".

1066601 votes

Hyperplan

Adversarial multi-agent planning skill. Self-orchestrates 5 hostile category members (unspecified-low, unspecified-high, deep, ultrabrain, artistry) via team-mode for ruthless cross-critique debate, distills only the defensible insights, then MANDATORILY hands the distilled insight bundle to the `plan` agent for executable plan formalization. Use when planning needs maximum rigor and surfacing of weak assumptions, blind spots, and over-engineering. Triggers: 'hyperplan', 'hpp', '/hyperplan', ...

686011 votes

Mcp Code Execution

Routes multi-tool workflows through MCP servers for large datasets and pipelines. Use when Bash tool overhead is limiting throughput on data-heavy tasks.

3351 votes

catchup

Recovers the conversation and failed tool calls of a previous Codex, Claude Code, Antigravity, Cline, Copilot CLI, Cursor, DeepSeek Harness, Kimi, OpenCode, Pi Agent, or ZCode session. Use when the user says "catch up", "what did the last session do", "get me up to speed", "I switched agents", asks to recover/summarize a previous session before continuing, or asks to diagnose or report a catchup failure. Do NOT use for the current conversation, git history, or any non-agent log.

651 votes

math-skill

A comprehensive mathematical reasoning skill for AI assistants — handles arithmetic to research-level problems with rigorous step-by-step reasoning, systematic verification, and transparent uncertainty handling

381 votes
View all in ai-agents →