macos-storage-management

Pass

Audited by Gen Agent Trust Hub on Aug 14, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The cleanup-inactive-caches.py script executes /usr/sbin/lsof to identify open files. This is a safety mechanism to prevent the deletion of active data. The command uses a hardcoded path and does not utilize a shell, which mitigates command injection risks.
  • [DATA_EXPOSURE]: The skill operates on local user directories (Documents, Caches, Library) to perform its stated purpose of storage management. No patterns of credential harvesting or network exfiltration were found; file access is restricted to the operations requested by the user.
  • [REMOTE_CODE_EXECUTION]: The skill does not download external scripts or install third-party packages. Both provided Python scripts rely exclusively on the Python standard library (e.g., hashlib, zipfile, pathlib).
  • [SAFE]: The archive script (archive-resident-files.py) implements a fail-closed design, utilizing SHA-256 hashing and source-identity re-checks (inode, mtime) to ensure data integrity before any source files are removed during a move operation.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 14, 2026, 07:55 AM
Security Audit — agent-trust-hub — macos-storage-management