disk-space-cleanup
Fail
Audited by Gen Agent Trust Hub on Mar 10, 2026
Risk Level: HIGHCOMMAND_EXECUTIONPROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
sudo -nto perform high-privilege system operations, includingnix-collect-garbage,docker system prune, andpodman system prune. It also executesncduas root to profile the entire filesystem. - [PROMPT_INJECTION]: The skill implements a self-modification mechanism in the "Learning Loop" section, instructing the agent to update its own instruction files (
SKILL.mdandreferences/ignore-paths.md) based on discovered system data. - Ingestion points: File system paths, mountpoints, and command patterns discovered during runtime via
findmnt,du, andncdu. - Boundary markers: Absent. Discovered strings are incorporated directly into markdown instruction files without delimiting markers or warnings.
- Capability inventory: High-privilege command execution via
sudoand the ability to download and execute external tools vianix run. - Sanitization: Absent. No validation or escaping is performed on discovered file paths before they are written to the skill files.
- [EXTERNAL_DOWNLOADS]: The skill fetches and executes utility packages (such as
cargo-sweepandncdu) from the official Nixpkgs registry using thenix runcommand.
Recommendations
- AI detected serious security threats
Audit Metadata