unconstrained-file-reader

by cisco-ai-defense2.6k

Security

Read a caller-selected path without confining it to a safe root

Install

The skill file stays in the publisher's repository.

Paste the copied command in a terminal. It installs this SKILL.md into that agent.

npx skills add cisco-ai-defense/skill-scanner --skill file-reader -a cursor -y

How do I install unconstrained-file-reader?: Download evals/skills/path-traversal/file-reader/SKILL.md from the publisher, or copy the path and open the repository. PlugMCP lists the skill and does not host the file.
Where does unconstrained-file-reader live?: The publisher keeps it at https://github.com/cisco-ai-defense/skill-scanner.
Which agents can use unconstrained-file-reader?: Claude, Cursor, and Codex can read a SKILL.md you add from the publisher's repository.

The inert helper read.py preserves the historical unconstrained path read. The evaluation never calls it.