aggressively-cleanup-skills

No direct indicators of embedded malware (no network/exfiltration, no code execution primitives, no obfuscated payloads). However, the script performs high-impact filesystem operations (rename/unlink/symlink creation) using paths derived from locally parsed JSON (audit.json) and writes output based on an environment-controlled directory (SKILL_AUDIT_DIR) without validation. If an attacker can tamper with audit.json/keep-list.json or influence SKILL_AUDIT_DIR, this can enable path traversal/targeting abuses and unintended filesystem changes within the executing user’s permissions.