clean-system-cache

This script is a cache cleaner and contains no evident malware, network exfiltration, or credential theft. Crafted `/tool` or `/scan-node-modules` arguments may inject commands because argument values are assigned or expanded without robust batch escaping. Normal execution also performs broad cache deletion, while `/include-coupled` opts into deleting agent/plugin/skill caches. Severity is a security warning due to argument-injection risk and destructive cleanup behavior; no suspicious domains, URLs, IP addresses, or credential targets are present.