mac-software-storage-cleanup
Pass
Audited by Gen Agent Trust Hub on Mar 29, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses local bash scripts to perform system audits and cleanup tasks. •
scripts/report_sizes.shusesduandfindto inventory application directories. •scripts/list_priority2_candidates.shusesduto inspect application support folders. •scripts/cleanup_priority1.shusesrm -rfto delete contents within~/Library/Cachesand~/Library/Developer/CoreSimulatorafter user confirmation. - [SAFE]: The skill implements safety measures to prevent accidental data loss. • The
SKILL.mdinstructions explicitly mandate waiting for user confirmation before executing any cleanup scripts. • Deletion is limited to specific, low-risk cache directories. • Bash scripts useset -euo pipefailfor error handling and handle filenames with null terminators to prevent injection via specially crafted file names. - [PROMPT_INJECTION]: The skill processes filenames from the local filesystem which acts as an ingestion point for untrusted data (Indirect Prompt Injection). • Ingestion points:
scripts/report_sizes.shandscripts/list_priority2_candidates.shread filenames from the system. • Boundary markers: Absent in prompt interpolation. • Capability inventory: File deletion viascripts/cleanup_priority1.sh. • Sanitization: Scripts use null-terminated strings for shell safety, though content is presented raw to the agent.
Audit Metadata