File Intelligence
Deep answers about individual files — metadata, hashing, disguise detection, archive/image peeking, content search.
11 tools — 11 read-only.
Read-only tools never modify anything; anything that changes your Mac pauses on an Approve card first.
file_info Read-onlyReport everything about ONE file or folder: size, created/modified dates, permissions, owner, whether macOS marks it as downloaded from the internet (quarantined), and whether it carries a recorded download source. Give an absolute path.
compute_file_hash Read-onlyCompute the SHA-256 checksum of ONE file's contents. Use to compare a download against the publisher's posted checksum, or to fingerprint a file. (For text/strings use security_tool's hash; this one hashes a FILE on disk.) Give an absolute path.
compare_files Read-onlyCheck whether TWO files are identical, by size then SHA-256.
inspect_file_header Read-onlyRead a file's first bytes (magic number) to determine its REAL type and compare it to the extension — catching a file DISGUISED as something else (e.g. an executable named 'invoice.pdf'). Also reports the content entropy (near 8.0 = encrypted/compressed).
list_archive_contents Read-onlyPeek inside a .zip or .tar/.tar.gz/.tgz archive and list what it contains WITHOUT extracting anything. Use before opening an archive to spot unexpected executables (.app/.pkg/.command/.scpt) hidden inside a supposed document bundle. For a .dmg use inspect_disk_image. Give an absolute path to the archive.
inspect_disk_image Read-onlyRead a .dmg / disk-image file's info (format, encryption, checksum, partition scheme) WITHOUT mounting it. Use before opening a downloaded .dmg, or when the user asks what a disk image is or whether it's encrypted. Give an absolute path to the image.
search_file_contents Read-onlySearch INSIDE text files under a folder for an exact phrase and return the files that contain it (bounded, read-only; text files only). Different from find_files, which matches file NAMES — use this when the user wants files that CONTAIN some text. Give a folder inside your home and the phrase.
folder_breakdown Read-onlyShow where space is going inside a SPECIFIC folder — the biggest sub-folders and files directly within it, with sizes.
list_trash_contents Read-onlyList what's currently in the Trash — item names, sizes, and the total.
hex_preview Read-onlyShow a bounded hex and ASCII dump of a region of one file (classic 16-bytes-per-row view). Give the file path and optionally a byte offset and length (max 1 KiB per call). For a full interactive view use the Hex Viewer panel.
extract_file_strings Read-onlyExtract the printable strings from the first ~2 MiB of one file and highlight the interesting ones — URLs, hosts, file paths, and token-shaped strings. Triage what a suspicious binary or document references without running it.