macos-cleaner
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the Python
subprocessmodule to execute standard macOS system utilities for disk diagnosis. These includedu,df,lsof,scutil,sw_vers,getconf, andfindacross various scripts likeanalyze_caches.py,analyze_large_files.py, andcleanup_report.py. - [PRIVILEGE_ESCALATION]: Certain diagnostic and repair operations, such as managing Apple Content Caching via
AssetCacheManagerUtil, requiresudoprivileges. The skill explicitly documents these requirements inreferences/apple_content_caching.mdand mandates user authorization before proceeding. - [EXTERNAL_DOWNLOADS]: In
references/mole_integration.md, the skill provide instructions for installingMole, an external CLI tool for disk analysis, using the Homebrew package manager (brew install tw93/tap/mole). This is presented as an optional integration for broad scans. - [DYNAMIC_EXECUTION]: The
check_gate_plan.pyscript implements a sophisticated safety mechanism that parses agent-generated cleanup plans and validates them against the skill's reference policies (e.g.,cleanup_targets.md). It ensures that only sanctioned targets are proposed and that the largest expected releases are prioritized.
Audit Metadata