cco-clean
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses Bash to execute system commands for checking file sizes and deleting application tracking data.
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied arguments to determine deletion logic, which represents an attack surface for command injection if malicious inputs are interpolated into shell commands without validation.
- Ingestion points: The skill parses
$ARGUMENTSfor cleanup flags and parameters inSKILL.md. - Boundary markers: No delimiters or warnings are used to separate user arguments from the instruction context.
- Capability inventory: The skill uses the
Bashtool to perform operations includingdu,find,wc, and file deletion (rm) within the~/.claude-context-optimizer/directory. - Sanitization: No explicit instructions are provided to sanitize, escape, or validate the
$ARGUMENTSvariable before it is used in system calls.
Audit Metadata