macos-cleaner

Pass

Audited by Gen Agent Trust Hub on Oct 8, 2026

Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses the Python subprocess module to execute standard macOS system utilities for disk diagnosis. These include du, df, lsof, scutil, sw_vers, getconf, and find across various scripts like analyze_caches.py, analyze_large_files.py, and cleanup_report.py.
  • [PRIVILEGE_ESCALATION]: Certain diagnostic and repair operations, such as managing Apple Content Caching via AssetCacheManagerUtil, require sudo privileges. The skill explicitly documents these requirements in references/apple_content_caching.md and mandates user authorization before proceeding.
  • [EXTERNAL_DOWNLOADS]: In references/mole_integration.md, the skill provide instructions for installing Mole, an external CLI tool for disk analysis, using the Homebrew package manager (brew install tw93/tap/mole). This is presented as an optional integration for broad scans.
  • [DYNAMIC_EXECUTION]: The check_gate_plan.py script implements a sophisticated safety mechanism that parses agent-generated cleanup plans and validates them against the skill's reference policies (e.g., cleanup_targets.md). It ensures that only sanctioned targets are proposed and that the largest expected releases are prioritized.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 8, 2026, 03:41 PM