Pullzip

io.github.work517Published by GitHub account work517v0.8.8Updated Oct 24, 2026

Inspect, search and safely extract zip/7z/rar/tar archives; repair garbled CJK file names.

VerifiedSTDIODesktop onlyFiles & StorageSecurity & Monitoring

Overview

AI-generated overview

ArchiveFlow (Pullzip) lets an assistant inspect, search, safely extract and create ZIP, 7z, RAR and TAR archives locally, and repair garbled CJK file names.

What you can do
  • Summarize an archive without extracting it and rate its safety
  • Scan for path traversal, links, zip bombs, disguised programs, macros, prompt-injection text and personal data
  • Browse entries, search names and text, and read a single file
  • Extract safely with unsafe entries blocked and nothing overwritten
  • Create, compare and verify archives, and report engine details
  • Rewrite garbled legacy file names (CP949, Shift-JIS, GBK, CP866/1251) as UTF-8
When to use it
Useful when you receive archives from unknown sources and want to know what is inside and whether it is safe before opening, or when you need to search, read or extract specific files and fix broken Korean, Japanese, Chinese or Russian file names.
Requirements
Runs as a local process on the user's machine, installed as an .mcpb package in Claude Desktop on Windows. No accounts, API keys or environment variables are declared. You choose which folders it may access (default: Downloads) and whether it is read-only.
Before you install
It can write to disk: extraction, archive creation and file-name rewriting change files, so keep it read-only or limit the allowed folders. Extracted text is marked as untrusted and may contain prompt-injection content. The source code is not public, so the safety claims cannot be independently verified.

Installation

In SourceWeft

  1. Open Pullzip in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.

Other MCP clients

Follow the launch instructions in the repository.

README

ArchiveFlow — releases

ArchiveFlow lets your AI assistant look inside archives safely: summarize ZIP / 7z / RAR / TAR files without extracting them, rate their safety, search and read files, extract them safely, and repair garbled Korean / Japanese / Chinese / Russian file names.

This repository only hosts installable releases. The source code is not public.

Install (Claude Desktop, Windows)

  1. Download the latest archiveflow-<version>.mcpb from Releases.
  2. Double-click it, or drag it into Claude Desktop → Settings → Extensions.
  3. Choose the folders ArchiveFlow may access (default: Downloads) and whether it is read-only.

Then ask Claude, for example: "What's inside Downloads/report.zip? Is it safe to open?"

What it does

Tool
inspect_archiveSummary without extracting + safety rating (safe / caution / danger)
scan_securityPath traversal, links, zip bombs, disguised programs, macros; deep mode finds prompt-injection text and personal data
list_entries · search_archive · read_entryBrowse, search names and text, read one file (text is marked as untrusted)
extract_archiveSafe extraction: unsafe entries are always blocked, nothing is overwritten, plan first
fix_zip_namesRewrite garbled legacy file names (CP949, Shift-JIS, GBK, CP866/1251) as UTF-8
create_archive · diff_archives · test_archive · engine_infoCreate without secrets, compare, verify
  • Everything runs locally on your PC. Files are never uploaded.
  • Access is limited to the folders you choose. Passwords never appear on a command line.
  • Two independent checks for ZIPs (the engine's view and the names actually stored in the file), nested archives up to two levels, overlapping-entry zip bombs, and a size watchdog during extraction.
  • Safety benchmark: 28 crafted malicious or tricky archives — 28/28 flagged, 0 files written outside the target folder.

한국어

ArchiveFlow는 AI 비서가 압축 파일을 안전하게 다루게 해 줍니다. 풀지 않고 요약·안전 판정, 검색·읽기, 안전하게 풀기, 깨진 한글·일본어·중국어 파일명 복구.

설치: Releases에서 archiveflow-<버전>.mcpb를 받아 더블클릭(또는 Claude Desktop → 설정 → 확장 프로그램에 끌어다 놓기) → 허용 폴더 선택. 모든 처리는 내 PC에서만 하며, 파일은 어디에도 올라가지 않습니다. 이 저장소에는 설치 파일만 있고 소스 코드는 공개하지 않습니다.

License

ArchiveFlow is proprietary software — see LICENSE.txt. Third-party components (including 7-Zip, LGPL) are listed in THIRD_PARTY_NOTICES.txt inside each .mcpb.

Source: README.md at commit 6f1938d

Tools

0
SourceWeft started this package once in an isolated sandbox, without credentials, to list its tools. That failed: the package type cannot run in the sandbox.

Version history

11
  1. v0.8.8LatestOct 21, 2026
  2. v0.8.6Oct 12, 2026
  3. v0.8.5Oct 9, 2026
  4. v0.8.4Oct 9, 2026
  5. v0.8.3Oct 8, 2026
  6. v0.8.1Oct 8, 2026
  7. v0.8.0Oct 7, 2026
  8. v0.7.3Oct 1, 2026
  9. v0.7.2Oct 1, 2026
  10. v0.7.0Sep 26, 2026
  11. v0.6.0Sep 16, 2026

Score

40% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 days25 pts

    Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.

  • Auth declared10 pts

    Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.

  • Tools listed15 pts

    Answer tools/list without a credential, or ship a package that starts in a sandbox without one.

  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts

    Declare a license in the repository or the registry entry.