Inspiration
Families share one NAS as a photo store, document store and download dump. Attachments, downloads and shared links land there first. One wrong click on a fake invoice or a disguised executable can compromise every device and photo on the home network, and most household users cannot tell a safe file from a dangerous one.
What it does
Filewarden is an on-NAS triage Skill. It checks every file that lands in a family NAS inbox folder before anyone opens it, and moves risky files to quarantine with a plain-language reason. It watches the inbox folder, inspects each new file's type, extension, size and contents listing, scores the risk, then clears it to the family library, holds it for review, or quarantines it. Every verdict carries a short reason in plain language, and a daily digest summarises what was checked.
How it works
Drop a file in the Inbox folder. The Skill inspects it and shows the verdict with its reason. Safe files move to the family library. Risky files are held, and move to Quarantine once the user confirms. The user reads the daily digest, then releases or deletes what was held.
How we built it
Filewarden is built to the Uliya Skill Development Standard, using the NAS local AI model and the UGOS CLI capabilities ug-filesystem, file-workflow, ug-document and ug-knowledge. Four expert agents do the work: Intake lists new files in the inbox folder. Inspection compares extension against detected type and checks double extensions, macros, scripts, archive contents and size anomalies, extracting document text. Verdict applies the checklist and writes the plain-language reason. Routing moves each file, and nothing moves to quarantine without the user's confirmation. The NAS local AI model drafts each reason. No custom executables or runtimes. No external service is called and no credential leaves the NAS.
The UGREEN AI NAS features are used at these steps: ug-filesystem lists and inspects new files at intake, and moves them at routing. ug-document extracts text from PDFs and documents during inspection. ug-knowledge saves the daily digest as text. The risk checklist ships inside the Skill package as a reference file.
What makes it different
Cloud antivirus guards one device at a time. Filewarden guards the shared family store itself, where files actually land, runs locally on the NAS with no file leaving home, and explains each verdict in plain language instead of a cryptic threat name.
What we built so far, and what is next
So far: the concept and the risk checklist. The Skill package will be built fresh with the starter kit during the hackathon, as the rules require. NAS testing is still needed for installation, the move-to-quarantine step, and the digest on real hardware.
How we will test it
Core case one: a benign invoice PDF clears to the library with a Safe reason. Core case two: an executable disguised as a PDF is quarantined with the mismatch named. Edge case: a password-protected archive that cannot be inspected is held for review and never cleared automatically.
Known limits
Filewarden cannot inspect encrypted or password-protected files. It cannot detonate or execute files, because Skills run no custom runtimes. Verdicts are triage, not a guarantee of safety. It relies on the supported NAS CLI capabilities as documented in the starter kit. There are no third-party components and no external services.
Built With
- ai
- file-workflow
- local
- nas
- ug-document
- ug-filesystem
- ug-knowledge
- ugreen-skill-developer-package
- uliya-skill-development-standard
- uliya-skill-kit
