mac-software-storage-cleanup-cn
Pass
Audited by Gen Agent Trust Hub on Mar 10, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/cleanup_priority1.shexecutesrm -rfon the contents of~/Library/Cachesand~/Library/Developer/CoreSimulator. While destructive, this is consistent with the skill's intended cleanup functionality and is applied only to temporary system paths. - [COMMAND_EXECUTION]: The auditing scripts
scripts/report_sizes.shandscripts/list_priority2_candidates.shutilizedu,find, andawkto calculate directory sizes across system and user application paths. - [DATA_EXFILTRATION]: The skill does not perform any network operations. Data remains local, with reports saved to the user's home directory.
- [PROMPT_INJECTION]: The skill ingests directory and file names as untrusted data during the auditing process. Evidence: 1. Ingestion points:
findandducommands in all script files. 2. Boundary markers: Absent. 3. Capability inventory:rm -rfinscripts/cleanup_priority1.sh. 4. Sanitization: Variables are double-quoted in shell scripts andfinduses-print0to safely handle special characters in filenames, preventing standard command injection.
Audit Metadata