Loop Factory
JuliusBrussee/skills
Run a spec-driven agent loop where coding tasks live as markdown specs that move through inbox → active → archive, get implemented by Claude Code or Codex, and pass a review gate before they count…
“Enforces explicit user permission before any file deletion. Activates when you're about to use rm, unlink, fs.rm, or any operation that removes files from disk. MUST be followed…”
Install Safe File Deletion
$ npx skills add MemTensor/MemOS --skill safe-file-deletion -a claude-codeProject install by default; add -g for ~/.claude/skills/.
$ gh skill install MemTensor/MemOS safe-file-deletion --agent claude-codeProject scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).
$ git clone --depth 1 https://github.com/MemTensor/MemOS.git skills-src && mkdir -p .claude/skills && cp -r skills-src/apps/openwork-memos-integration/apps/desktop/skills/safe-file-deletion .claude/skills/safe-file-deletion && rm -rf skills-srcUse ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.
Claude Code skills documentation · loads skills from .claude/skills/
Install the "safe-file-deletion" agent skill from https://github.com/MemTensor/MemOS/tree/main/apps/openwork-memos-integration/apps/desktop/skills/safe-file-deletion into .claude/skills/safe-file-deletion/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "safe-file-deletion", then confirm the skill loads.Claude Code copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$skill-installer install https://github.com/MemTensor/MemOS/tree/main/apps/openwork-memos-integration/apps/desktop/skills/safe-file-deletionType this inside Codex. $skill-installer <name> installs a curated skill from openai/skills. The installer writes to $CODEX_HOME/skills (default ~/.codex/skills). Restart Codex if the skill does not show up.
$ npx skills add MemTensor/MemOS --skill safe-file-deletion -a codexProject install goes to .agents/skills/; add -g for ~/.codex/skills/.
$ gh skill install MemTensor/MemOS safe-file-deletion --agent codexProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/MemTensor/MemOS.git skills-src && mkdir -p .agents/skills && cp -r skills-src/apps/openwork-memos-integration/apps/desktop/skills/safe-file-deletion .agents/skills/safe-file-deletion && rm -rf skills-srcUse ~/.agents/skills/ instead of .agents/skills for a personal install.
Codex skills documentation · loads skills from .agents/skills/
Install the "safe-file-deletion" agent skill from https://github.com/MemTensor/MemOS/tree/main/apps/openwork-memos-integration/apps/desktop/skills/safe-file-deletion into .agents/skills/safe-file-deletion/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "safe-file-deletion", then confirm the skill loads.Codex copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add MemTensor/MemOS --skill safe-file-deletion -a cursorProject install goes to .agents/skills/; add -g for ~/.cursor/skills/.
$ gh skill install MemTensor/MemOS safe-file-deletion --agent cursorProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/MemTensor/MemOS.git skills-src && mkdir -p .cursor/skills && cp -r skills-src/apps/openwork-memos-integration/apps/desktop/skills/safe-file-deletion .cursor/skills/safe-file-deletion && rm -rf skills-srcUse ~/.cursor/skills/ instead of .cursor/skills for a personal install.
Cursor skills documentation · loads skills from .cursor/skills/, .agents/skills/, .claude/skills/, .codex/skills/
Install the "safe-file-deletion" agent skill from https://github.com/MemTensor/MemOS/tree/main/apps/openwork-memos-integration/apps/desktop/skills/safe-file-deletion into .cursor/skills/safe-file-deletion/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "safe-file-deletion", then confirm the skill loads.Cursor copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gemini skills install https://github.com/MemTensor/MemOS.git --path apps/openwork-memos-integration/apps/desktop/skills/safe-file-deletion--scope user (default) or --scope workspace; --path is the subfolder of the repo that holds the skill; --consent skips the security confirmation prompt.
$ npx skills add MemTensor/MemOS --skill safe-file-deletion -a gemini-cliProject install goes to .agents/skills/; add -g for ~/.gemini/skills/.
$ gh skill install MemTensor/MemOS safe-file-deletion --agent gemini-cliProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/MemTensor/MemOS.git skills-src && mkdir -p .gemini/skills && cp -r skills-src/apps/openwork-memos-integration/apps/desktop/skills/safe-file-deletion .gemini/skills/safe-file-deletion && rm -rf skills-srcUse ~/.gemini/skills/ instead of .gemini/skills for a personal install, then run /skills reload.
Gemini CLI skills documentation · loads skills from .gemini/skills/, .agents/skills/
Install the "safe-file-deletion" agent skill from https://github.com/MemTensor/MemOS/tree/main/apps/openwork-memos-integration/apps/desktop/skills/safe-file-deletion into .gemini/skills/safe-file-deletion/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "safe-file-deletion", then confirm the skill loads.Gemini CLI copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gh skill install MemTensor/MemOS safe-file-deletionInstalls for Copilot at project scope by default; add --scope user for a personal install. Preview a skill first with gh skill preview. Needs GitHub CLI 2.90.0 or later (public preview).
$ npx skills add MemTensor/MemOS --skill safe-file-deletion -a github-copilotProject install goes to .agents/skills/; add -g for ~/.copilot/skills/.
$ git clone --depth 1 https://github.com/MemTensor/MemOS.git skills-src && mkdir -p .github/skills && cp -r skills-src/apps/openwork-memos-integration/apps/desktop/skills/safe-file-deletion .github/skills/safe-file-deletion && rm -rf skills-srcUse ~/.copilot/skills/ instead of .github/skills for a personal install. Commit .github/skills so cloud agent and code review can use it.
GitHub Copilot skills documentation · loads skills from .github/skills/, .claude/skills/, .agents/skills/
Install the "safe-file-deletion" agent skill from https://github.com/MemTensor/MemOS/tree/main/apps/openwork-memos-integration/apps/desktop/skills/safe-file-deletion into .github/skills/safe-file-deletion/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "safe-file-deletion", then confirm the skill loads.GitHub Copilot copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add MemTensor/MemOS --skill safe-file-deletion -a opencodeOpenCode documents no install command of its own. Project install goes to .agents/skills/; add -g for ~/.config/opencode/skills/.
$ gh skill install MemTensor/MemOS safe-file-deletion --agent opencodeProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/MemTensor/MemOS.git skills-src && mkdir -p .opencode/skills && cp -r skills-src/apps/openwork-memos-integration/apps/desktop/skills/safe-file-deletion .opencode/skills/safe-file-deletion && rm -rf skills-srcUse ~/.config/opencode/skills/ instead of .opencode/skills for a personal install.
OpenCode skills documentation · loads skills from .opencode/skills/, .claude/skills/, .agents/skills/
Install the "safe-file-deletion" agent skill from https://github.com/MemTensor/MemOS/tree/main/apps/openwork-memos-integration/apps/desktop/skills/safe-file-deletion into .opencode/skills/safe-file-deletion/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "safe-file-deletion", then confirm the skill loads.OpenCode copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
Facts
- Skill name
safe-file-deletion- GitHub stars
- 12k
- Token cost
- ~291 tokens
- SKILL.md length
- 103 words
- Files
- 1
- Skills in repo
- 6
- Repo updated
- First seen
- Licence
- Apache-2.0
At a glance
- Works in 5 steps: Call request_file_permission with… → For multiple files, use filePaths array… → Wait for response → …
- SKILL.md covers Rule, Applies To, Examples and No Workarounds
- Instructions only: no scripts, shell commands, URLs or credentials in SKILL.md
About this skill
“Enforces explicit user permission before any file deletion. Activates when you're about to use rm, unlink, fs.rm, or any operation that removes files from disk. MUST be followed for all delete operations.”
Safe File Deletion is a skill in MemTensor/MemOS (12k stars). Its SKILL.md is about 291 tokens. Licence: Apache-2.0.
Workflow steps
5 steps, taken from the first numbered list in SKILL.md.
- Call request_file_permission with operation: "delete"
- For multiple files, use filePaths array (not multiple calls)
- Wait for response
- Only proceed if "allowed"
- If "denied", acknowledge and do NOT delete
What it can do on your machine
Read from SKILL.md and the folder at commit a7367d0. It shows what the files ask for, not the result of running them.
Tool permissions
Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.
From allowed-tools in the SKILL.md frontmatter.
Runs code
No scripts in the folder and no shell commands in SKILL.md (its code samples are json).
From the folder's file list and the shell code blocks in SKILL.md.
Network
No URLs in SKILL.md.
From URLs in SKILL.md, links to its own repository left out.
Credentials
Names no API keys, tokens, secrets or passwords.
From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.
Context cost
Safe File Deletion loads about 291 tokens when it runs. Until then it costs about 56 tokens; SKILL.md has 103 words of instructions outside code blocks.
Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.
Safety
Auto-check passed
The automated check found no risky patterns in SKILL.md.
Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.
SKILL.md
The full file from MemTensor/MemOS at commit a7367d0, republished under its Apache-2.0 licence (© MemTensor). 103 words, ~291 tokens.
Download SKILL.mdSave it as
.claude/skills/safe-file-deletion/SKILL.md (or your agent's skills folder).- name
- safe-file-deletion
- description
- Enforces explicit user permission before any file deletion. Activates when you're about to use rm, unlink, fs.rm, or any operation that removes files from disk. MUST be followed for all delete operations.
Safe File Deletion
Rule
Before deleting ANY file, you MUST:
- Call
request_file_permissionwithoperation: "delete" - For multiple files, use
filePathsarray (not multiple calls) - Wait for response
- Only proceed if "allowed"
- If "denied", acknowledge and do NOT delete
Applies To
rmcommands (single or multiple files)rm -rf(directories)unlink,fs.rm,fs.rmdir- Any script or tool that deletes files
Examples
Single file:
{
"operation": "delete",
"filePath": "/path/to/file.txt"
}Multiple files (batched into one prompt):
{
"operation": "delete",
"filePaths": ["/path/to/file1.txt", "/path/to/file2.txt"]
}No Workarounds
Never bypass deletion warnings by:
- Emptying files instead of deleting
- Moving to hidden/temp locations
- Using obscure commands
The user will see a prominent warning. Wait for explicit approval.
© MemTensor, Apache-2.0. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file
Files
Just SKILL.md in apps/openwork-memos-integration/apps/desktop/skills/safe-file-deletion of MemTensor/MemOS.
Open the folder on GitHubat commit a7367d0
Compare with similar skills
Safe File Deletion next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.
| Skill | Stars | Used in | Tokens | Auto-check | Licence | Repo updated |
|---|---|---|---|---|---|---|
| Safe File Deletion this skillMemTensor/MemOS | 12k | — | ~291 | Automated safety check: Pass | Apache-2.0 | |
| Loop FactoryJuliusBrussee/skills | 161 | — | ~2k | Automated safety check: Pass | MIT | |
| Guard Modegarrytan/gstack | 136k | — | ~919 | Automated safety check: Notes | MIT | |
| Iron Proxy Gateway Rulesnanocoai/nanoclaw | 31k | 1 repos | ~598 | Automated safety check: Pass | MIT | |
| Show Me Your Work Decision Logcursor/plugins | 10k | 9 repos | ~1.6k | Automated safety check: Pass | None | |
| Darwin Skill Optimizeralchaincyf/darwin-skill | 6.2k | 1 repos | ~4.7k | Automated safety check: Pass | MIT |
Similar skills
Guard Mode
garrytan/gstack
Switches on full safety by combining warnings before destructive commands with a block on edits outside one directory you choose, for work on production or live systems.
Iron Proxy Gateway Rules
nanocoai/nanoclaw
Rules for working behind Iron Proxy: connect external accounts without handling raw tokens, treat blocked requests as policy outcomes, and never claim a connection before it works.
- Official
Show Me Your Work Decision Log
cursor/plugins
Keeps a TSV decision log for long or unattended agent runs, one row per decision with what, why, evidence and result, so a reviewer can check the work later.
Darwin Skill Optimizer
alchaincyf/darwin-skill
Scores SKILL.md files on a nine-dimension rubric, then improves them in a keep-or-revert loop with independent judge agents, test prompts, git history and human checkpoints.
Loop Constraints Enforcer
cobusgreyling/loop-engineering
Loads a project's loop-constraints.md before any other action and blocks pushes, edits or merges that violate the rules it defines.
More from MemTensor/MemOS
Dev Browser Automation
MemTensor/MemOS
Automates a real browser through short TypeScript scripts that keep page state between runs, for navigating, filling forms, taking screenshots and extracting data.
BrowserWing Executor API
MemTensor/MemOS
Controls a browser through BrowserWing's local HTTP API: navigation, clicks, typing, data extraction, accessibility snapshots, screenshots and batch operations.
Ask User Question
MemTensor/MemOS
Shows a question as a modal in the interface to clarify a task, collect a preference or get approval, since the user cannot see terminal output.
BrowserWing Admin
MemTensor/MemOS
Installs, configures and operates BrowserWing, a browser automation platform, covering Chrome setup, LLM provider configuration, and creating or running automation scripts.
MemOS Memory Search Guide
MemTensor/MemOS
Explains when to call MemOS's own memory tools to search past conversations, after the automatic per-turn recall hook comes up empty.
Related
Categories
Questions about Safe File Deletion
How do I install Safe File Deletion in Claude Code?
Run `npx skills add MemTensor/MemOS --skill safe-file-deletion -a claude-code`. Or copy the skill folder (apps/openwork-memos-integration/apps/desktop/skills/safe-file-deletion in MemTensor/MemOS) into .claude/skills/safe-file-deletion in your project. Claude Code loads it when a task matches its description.
How do I install Safe File Deletion in Codex?
Run `npx skills add MemTensor/MemOS --skill safe-file-deletion -a codex`. Or copy the skill folder (apps/openwork-memos-integration/apps/desktop/skills/safe-file-deletion in MemTensor/MemOS) into .agents/skills/safe-file-deletion in your project. Codex loads it when a task matches its description.
Can I use Safe File Deletion in Cursor, Gemini CLI or GitHub Copilot?
Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add MemTensor/MemOS --skill safe-file-deletion -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/safe-file-deletion, .gemini/skills/safe-file-deletion, .github/skills/safe-file-deletion and .opencode/skills/safe-file-deletion in your project.
What does Safe File Deletion need to run?
SKILL.md names no scripts, command-line tools or credentials: Safe File Deletion is instructions for the agent only.
Does Safe File Deletion access the network?
SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.
Is Safe File Deletion safe to install?
Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.
What licence does Safe File Deletion use?
Safe File Deletion is published under the Apache-2.0 licence (the repository's licence). It allows redistribution, so the full SKILL.md is shown on this page.
How many tokens does Safe File Deletion use?
About 291 tokens (SKILL.md is roughly 1.2k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.
What are the alternatives to Safe File Deletion?
Skills that share tags, products or a category with Safe File Deletion: Loop Factory (JuliusBrussee/skills, 161 stars), Guard Mode (garrytan/gstack, 136k stars), Iron Proxy Gateway Rules (nanocoai/nanoclaw, 31k stars) and Show Me Your Work Decision Log (cursor/plugins, 10k stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.
Who maintains Safe File Deletion?
MemTensor (a GitHub organization) maintains it in MemTensor/MemOS, which has 11,754 GitHub stars. The repository holds 6 skills in this directory. The repository was last updated on September 29, 2026.
Source: MemTensor/MemOS on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.