cleanup
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the Bash tool to execute a local maintenance script,
larch.sh, located within the${CLAUDE_PLUGIN_ROOT}directory. This script removes stale temporary files from~/.cache/larch/sessions/,/tmp, and the$TMPDIRpath. - [INDIRECT_PROMPT_INJECTION]: The skill parses standard output from the maintenance script to extract removal counts and relay them to the user. Ingestion points: Data enters the agent's context through the parsed stdout of the
larch.shcommand execution inSKILL.md. Boundary markers: There are no delimiters or instructions used to distinguish the script's output from the agent's logic. Capability inventory: The skill has the capability to execute shell commands and write to the user-facing output. Sanitization: The skill looks for specific keys (e.g.,SESSION_COUNT) but does not sanitize the values parsed from these keys before reporting them.
Audit Metadata