Reactive virus scan for the reception attachment scan-gate (D-173 P5). Fires whenever a file lands in data.file.received (an inbound reception drop / messenger media / mail attachment), scans it with the local ClamAV daemon through the ClamAV pack's file.scan cli operation, and writes the verdict back to the record's scan_status via the MCP-reserved core.storage.file.set-scan-status kernel op. The reception inbox reads scan_status, so a 'flagged' upload surfaces a sharper warning at approve while a 'clean' one clears the advisory warning. The verdict comes from the scanner exit code (0 = clean, 1 = infected); a scan error (clamd not running, exit 2+) halts this run and leaves the record unscanned (the advisory gate still warns). Requires the clamav-pack installed and a running clamd. Install once; the install creates a default dish that runs on every inbound file.
ClamAV Scan (inbound files)
Auto-scan every inbound file for malware. Installs one reactive recipe that fires on data.file.received.*.created — an inbound reception drop, messenger media, or mail attachment — runs the ClamAV pack's file.scan over the bytes, and writes the verdict (clean / flagged) back to the record's scan_status. This sharpens the reception attachment scan-gate (D-173 P5): a flagged upload surfaces a stronger warning when the reviewer approves the held request, while a clean one clears the advisory. Depends on the ClamAV capability pack (clamav-pack), which carries the cli scan op and the clamd setup docs; install both and run a local clamd. A scan error (clamd down) leaves the file unscanned and the advisory gate still warns — nothing is silently approved. After install, the default dish runs on every inbound file; no per-file configuration.
What this pack installs
This pack installs the complete recipe workflow together.
Builds on
- clamav-pack v1+
Trust & control
What installing this whole pack would let it do. Recued grants these permissions at install — review them there before approving.