appcleaner
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides scripts (
macos_app_cleaner.pyanduninstall_app.swift) that execute file system operations to delete directories and files matching specific patterns. Specifically, the Python script usesshutil.rmtreeandos.remove, while the Swift script usesFileManager.default.removeItemto purge application bundles and associated library artifacts. - [PRIVILEGE_ESCALATION]: Documentation in
SKILL.mdandgpt.mdexplicitly directs the user to run scripts with elevated permissions orsudoto facilitate the removal of files in protected directories such as/Library/LaunchDaemons/and/Library/PrivilegedHelperTools/. - [INDIRECT_PROMPT_INJECTION]: The uninstallation logic relies on string matching of file names found in various system and user library paths against an application's
CFBundleIdentifieror name. - Ingestion points: The scripts ingest the target application path from command-line arguments and extract identifiers from the bundle's
Info.plistfile. - Boundary markers: There are no boundary markers or instructions to ignore potentially malicious or misleading filenames encountered during the filesystem sweep.
- Capability inventory: The scripts possess the capability to terminate running processes (
app.terminatein Swift) and delete arbitrary files and folders within the provided search paths (shutil.rmtreeandos.removein Python). - Sanitization: The Python script includes a basic validation check to ensure the input path ends with the
.appextension before proceeding with uninstallation.
Audit Metadata