macos-storage-management
Pass
Audited by Gen Agent Trust Hub on Aug 14, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The
cleanup-inactive-caches.pyscript executes/usr/sbin/lsofto identify open files. This is a safety mechanism to prevent the deletion of active data. The command uses a hardcoded path and does not utilize a shell, which mitigates command injection risks. - [DATA_EXPOSURE]: The skill operates on local user directories (Documents, Caches, Library) to perform its stated purpose of storage management. No patterns of credential harvesting or network exfiltration were found; file access is restricted to the operations requested by the user.
- [REMOTE_CODE_EXECUTION]: The skill does not download external scripts or install third-party packages. Both provided Python scripts rely exclusively on the Python standard library (e.g.,
hashlib,zipfile,pathlib). - [SAFE]: The archive script (
archive-resident-files.py) implements a fail-closed design, utilizing SHA-256 hashing and source-identity re-checks (inode, mtime) to ensure data integrity before any source files are removed during a move operation.
Audit Metadata