appcleaner

Pass

Audited by Gen Agent Trust Hub on Oct 23, 2026

Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides scripts (macos_app_cleaner.py and uninstall_app.swift) that execute file system operations to delete directories and files matching specific patterns. Specifically, the Python script uses shutil.rmtree and os.remove, while the Swift script uses FileManager.default.removeItem to purge application bundles and associated library artifacts.
  • [PRIVILEGE_ESCALATION]: Documentation in SKILL.md and gpt.md explicitly directs the user to run scripts with elevated permissions or sudo to facilitate the removal of files in protected directories such as /Library/LaunchDaemons/ and /Library/PrivilegedHelperTools/.
  • [INDIRECT_PROMPT_INJECTION]: The uninstallation logic relies on string matching of file names found in various system and user library paths against an application's CFBundleIdentifier or name.
  • Ingestion points: The scripts ingest the target application path from command-line arguments and extract identifiers from the bundle's Info.plist file.
  • Boundary markers: There are no boundary markers or instructions to ignore potentially malicious or misleading filenames encountered during the filesystem sweep.
  • Capability inventory: The scripts possess the capability to terminate running processes (app.terminate in Swift) and delete arbitrary files and folders within the provided search paths (shutil.rmtree and os.remove in Python).
  • Sanitization: The Python script includes a basic validation check to ensure the input path ends with the .app extension before proceeding with uninstallation.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 23, 2026, 09:13 PM