cleanup-deleted
Warn
Audited by Gen Agent Trust Hub on Apr 4, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONCREDENTIALS_UNSAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a bash script block that triggers a Python script via the uv package manager.
- [REMOTE_CODE_EXECUTION]: The skill references and executes an external Python script (
cleanup_deleted.py) located at a computed path ($HOME/.claude/plugins/...) that is not part of the analyzed files, making the execution logic unverifiable. - [CREDENTIALS_UNSAFE]: The skill's stated purpose is to manage Telegram account dialogs and contacts, which involves the use of sensitive Telegram authentication sessions. Because the script performing these actions is missing from the package, the handling and potential exposure of these credentials cannot be audited.
Audit Metadata