disk-cleaner
Warn
Audited by Snyk on Feb 15, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 1.00). The script calls /bin/bash -c "$(curl -fsSL https://raw.githubusercontent.com/Homebrew/install/HEAD/install.sh)" at runtime (install_homebrew), which fetches and executes remote code from https://raw.githubusercontent.com/Homebrew/install/HEAD/install.sh to install a required dependency (Homebrew), so it directly executes external code.
MEDIUM W013: Attempt to modify system services in skill instructions.
- Attempt to modify system services in skill instructions detected (high risk: 0.70). The skill automates installing and running a disk-cleaning tool that deletes files and modifies system state (system/user caches, logs, etc.), so it poses a non-trivial risk of destructive changes even though it does not explicitly request sudo, privilege bypass, or user-account/system-config modifications.
Audit Metadata