Geek-skills-c-drive-cleaner
Pass
Audited by Gen Agent Trust Hub on Mar 26, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/clean_temp.pyperforms file and directory deletion usingos.removeandshutil.rmtreeto free up disk space. This is the core functionality of the skill. To mitigate risk, the script uses a dry-run mode by default and requires the--executeflag followed by a manual 'YES' confirmation from the user before any files are actually removed. - [DATA_EXPOSURE]: The analysis scripts (
analyze_disk.pyandfind_large_files.py) recursively scan the filesystem to identify large files and directories. This involves reading file metadata, names, and paths across system-wide locations including user application data and system logs. - [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface because it reads and displays file names from the local disk to the agent. If a file is maliciously named with LLM instructions, it could potentially influence the agent's behavior when the agent processes the scanning results. Evidence: The
find_large_files.pyandanalyze_disk.pyscripts ingest untrusted file names and output them directly to the console for the agent to read, without specific sanitization or boundary markers.
Audit Metadata