Claude security directory

Filesystem

Published by Anthropic

Medium risk

This extension allows Claude to interact with your local filesystem, enabling it to read and write files directly. This can be useful for tasks such as file management, data processing, and automation of repetitive tasks. The extension provides a set of tools that can be used to navigate directories, read file contents, and write new files or modify existing ones. Underneath the hood, it uses @modelcontextprotocol/server-filesystem.

Security assessment

Plutonium assessed this desktop extension for permissions, capabilities, and security-relevant behavior.

  • Reads your private information: This connector can read data the connected service holds about you - documents, messages, contact lists, source code, customer records, or saved profile details - and pass it back to the AI.
  • Can change or update your information: This connector can edit, rename, overwrite, or otherwise modify records in the connected service. If a request gets manipulated, your data could be altered without you noticing.

Available capabilities

This add-on exposes 11 tools or capabilities.

  • read_file
  • read_multiple_files
  • write_file
  • edit_file
  • create_directory
  • list_directory
  • directory_tree
  • move_file
  • search_files
  • get_file_info
  • list_allowed_directories

The interactive security report will load automatically.