xcode-disk-cleanup
Pass
Audited by Gen Agent Trust Hub on Jul 27, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes macOS system utilities including
du,mdfind,mdls,ps, andxcrun simctlto gather disk usage data and manage simulator devices. These executions use structured argument lists and absolute paths to system binaries, minimizing command injection risks. - [DATA_EXFILTRATION]: No network activity was detected. The script processes local file metadata and simulator information, storing reports in a local directory (
.xcode-disk-cleanup-audit) for user inspection. - [PROMPT_INJECTION]: The instructions implement a strict safety contract requiring the agent to audit before mutating and to obtain explicit itemized approval for specific IDs. It uses confirmation phrases to ensure the agent has received user permission before proceeding with cleanup tasks.
- [SAFE]: The skill implements best practices for system maintenance tools, such as moving files to the Trash instead of immediate deletion, fingerprinting files (inode/device) to prevent race conditions or identity changes between audit and execution, and explicitly protecting active developer processes and distributed archives.
Audit Metadata