Skill: caesaryp/rm-safety (version 1.2.2)

# rm-safety - RM Command Safety Check **Intercepts risky `rm` commands to assess impact, confirm user intent, and suggest safer alternatives before execution to prevent accidental data loss.** **拦截高危 `rm` 命令，评估影响并确认用户意图，提供安全替代方案，防止误删数据。** --- ## Trigger Conditions | 触发条件 Triggered when user requests to execute or agent prepares to execute: 当用户请求执行或我准备执行以下命令时触发： - `rm` (any arguments | 任何参数) - `rm -rf` / `rm -fr` - `rm -r` / `rm -R` - `unlink` - `shred` - Other direct file deletion commands | 其他直接删除文件的命令 **Not Triggered | 不触发:** - `trash` command (recoverable deletion | 可恢复删除) - `mv` to trash directory | 移动到 trash 目录 --- ## Safety Check Flow | 安全检查流程 ### 1. Intercept Command | 拦截命令 When `rm` command is detected, **stop execution immediately** and enter confirmation flow. 检测到 `rm` 命令时，**立即停止执行**，进入询问流程。 ### 2. Collect Information | 收集信息 Before asking, perform these checks (read-only operations | 只读操作): **Important: Always quote paths to prevent injection | 重要：始终引用路径防止注入** ```bash # Check if target exists (quoted path | 引用路径) | 检查目标是否存在 ls -la -- "$path" # If directory, count contents (safe find | 安全 find) | 如果是目录，统计内容 find -- "$path" -type f 2>/dev/null | wc -l # files | 文件数 find -- "$path" -type d 2>/dev/null | wc -l # directories | 目录数 # Check if inside workspace | 检查是否在 workspace 内 echo "$path" | grep -q ".openclaw/workspace" && echo "⚠️ Inside workspace" || echo "⚠️ Outside workspace" # Check if critical directory | 检查是否是关键目录 echo "$path" | grep -qE "(Documents|Desktop|Downloads|Pictures)" && echo "⚠️ User critical directory" # Resolve to absolute path (prevent relative path tricks | 防止相对路径欺骗) realpath -- "$path" 2>/dev/null || readlink -f -- "$path" ``` **Safety notes | 安全说明:** - Use `--` to stop option parsing (prevents `-rf /` tricks) | 使用 `--` 停止选项解析 - Always quote `"$path"` (prevents space injection) | 始终引用 `"$path"` 防止空格注入 - Redirect stderr `2>/dev/null` (suppress errors gracefully) | 重定向 stderr 优雅处理错误 ### 3. Confirmation Format | 询问格式 **Must use this format to ask user | 必须使用以下格式询问用户：** ``` 🚨 High-Risk Command Confirmation | 高危命令确认 ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 📋 Command Details | 命令详情 ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ Command | 命令：rm [full command with arguments | 完整命令及参数] Working Directory | 执行位置：[current directory | 当前工作目录] Target Path | 目标路径：[absolute path | 绝对路径] ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ ⚠️ Impact Assessment | 影响评估 ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ [ ] Will delete X files | 将删除 X 个文件 [ ] Will delete Y directories (Z total items | 将删除 Y 个文件夹 (含 Z 个子项) [ ] Location | 路径位置：Inside workspace / Outside workspace / User critical directory [ ] Recoverable via trash | 是否在 trash 可恢复范围：No (rm is permanent | rm 不可恢复) ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 💡 Alternatives | 替代方案 ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 1. Use trash command → Recoverable in Finder | 使用 trash 命令 → 可在 Finder 恢复 2. Backup before delete | 先备份再删除 → `cp -r <path> <backup>` 3. Move to temp directory | 移动到临时目录 → `mv <path> /tmp/xxx` ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ ❓ Please Confirm | 请确认 ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ Reply [y] to execute | 回复 [y] 确认执行 Reply [n] to cancel | 回复 [n] 取消 Reply [backup] to backup first | 回复 [backup] 先备份再执行 Reply [trash] to use trash instead | 回复 [trash] 改用 trash 命令 ``` ### 4. User Response Handling | 用户响应处理 | User Reply | Action | |------------|--------| | `y` / `yes` / `确认` | Execute original command | 执行原命令 | | `n` / `no` / `取消` | Cancel operation | 取消操作，不执行 | | `backup` | Backup to `/tmp/rm-backup-<timestamp>/` then execute | 先备份到 `/tmp/rm-backup-<timestamp>/` 再执行 | | `trash` | Use `trash` command instead | 改用 `trash` 命令执行 | --- ## Exceptions | 例外情况 **Can execute without asking | 无需询问可直接执行:** - User explicitly says "execute without asking" **AND** path is verified safe | 用户明确说 "不用问了直接执行" **且** 路径已验证安全 - Deleting temp files under `/tmp/` (created by agent, verified by `ls -la`) | 删除 `/tmp/` 下的临时文件（且是我自己创建的，已用 `ls -la` 验证） - User provided explicit written permission (same session) **AND** path matches permission | 用户提供了明确的书面许可（同一会话内）**且** 路径与许可匹配 **Still must ask even if user says not to | 仍需询问即使用户说不用问:** - Deleting entire workspace directory | 删除整个 workspace 目录 - Deleting user home directory (`/Users/caesar/`) | 删除用户主目录 - Dangerous commands like `rm -rf /` (should refuse directly) | 使用 `rm -rf /` 等危险命令（应直接拒绝） - Path contains unescaped special characters (spaces, `;`, `|`, `&`) | 路径包含未转义的特殊字符 **Must refuse directly | 直接拒绝:** - `rm -rf /` or `rm -rf /*` (system destruction) | 系统级危险命令 - `rm -rf ~` or `rm -rf /home/*` (user data destruction) | 用户数据毁灭 - Path resolves to root or system directories | 路径解析为根目录或系统目录 --- ## Activation Conditions | 激活条件 This skill activates when: 本 skill 在以下情况自动激活： - Detects `rm`, `rm -r`, `rm -rf`, `unlink`, or `shred` in exec call | 检测到 exec 调用包含这些命令 - User mentions "delete", "remove", "erase" involving file paths | 用户提到这些词且涉及文件路径 **Path validation before execution | 执行前路径验证:** 1. Resolve to absolute path using `realpath` or `readlink -f` | 解析为绝对路径 2. Verify path exists using `test -e "$path"` | 验证路径存在 3. Check for dangerous patterns (`/`, `~`, `*`, wildcards) | 检查危险模式 4. Reject if path contains shell metacharacters unescaped | 如果包含未转义的 shell 元字符则拒绝 --- ## Test Cases | 测试用例 ```bash # Should trigger confirmation | 应该触发询问 rm file.txt rm -rf ./folder rm -r /path/to/something # Should NOT trigger | 不应触发 trash file.txt mv file.txt ~/.Trash/ ``` --- **Priority | 优先级:** High (security-related | 安全相关) **Last Updated | 最后更新:** 2026-03-24


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (HIGH)