RedHat File Operations

---

name: file-operations description: Perform safe, auditable file operations with path validation and backups. metadata: author: RedHat Dev version: 1.0.0 owner: RedHat Dev Agent category: execution

---

SKILL: file-operations

Purpose

Perform safe, auditable file operations (read/write/update/delete/move/copy) in an MCP-enabled environment with path validation and backups.

When to Use

Any task requires editing files on disk.

You need to ensure changes are safe and reversible.

You must avoid accidental overwrites or destructive operations.

Inputs

operation (required, enum: read|write|update|delete|move|copy).

paths (required, object):

- source (optional, string) - target (optional, string) - targets (optional, string[])

content (optional, string): for write/update.

backup (optional, boolean, default: true for overwrite/delete).

constraints (optional, string[]): e.g., “only within workspace”.

Steps

1. Resolve absolute paths and normalize. 2. Validate scope: - operation stays inside the intended workspace root(s) - block path traversal/suspicious targets 3. Preflight: - confirm existence for read/update/delete - confirm non-existence (or allow overwrite explicitly) for write/move 4. If overwrite/delete and backup=true, create a backup copy (timestamped). 5. Execute the operation with explicit reporting (what changed). 6. Post-validate: - file exists where expected - content/diff matches expectation

Validation

Operation is reversible when possible (backup exists for destructive actions).

The final target path is verified before execution.

The operation result is explicitly reported (not silent).

Output

operation: ""
affected: [""]
backup_paths: [""]
result: "success|blocked|failed"
notes: ["..."]

Safety Rules

Never delete or overwrite recursively without explicit user confirmation.

Never operate on computed paths without printing the resolved final paths first.

Prefer patch-based updates over full-file rewrites when possible.

Example

Update a config file:

operation: update

paths: { target: "apps/api/.env.example" }

Validation: backup created; diff is minimal; file still parses.

Update a config file:

operation: update

paths: { target: "apps/api/.env.example" }

Validation: backup created; diff is minimal; file still parses.

Operation is reversible when possible (backup exists for destructive actions).

The final target path is verified before execution.

The operation result is explicitly reported (not silent).