housekeeping
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill operates as a local utility for system maintenance and does not exhibit malicious behavior. It implements several safety-first design patterns:
- Dry-run by default: The cleanup automation requires an explicit
--applyflag to perform deletions, providing a safety buffer for users. - Sensitive data exclusions: The discovery scripts explicitly prune sensitive paths such as
~/Library/Mail,~/.Trash,*.photoslibrary, and.gitdirectories to prevent accidental exposure or deletion of personal data. - Safe deletion tools: It prioritizes the use of the
rip(rm-improved) utility, which moves files to a temporary graveyard volume rather than permanent deletion, allowing for recovery. - Process awareness: The cleanup script checks for running processes (e.g.,
claudevm) before touching associated data bundles to prevent system instability. - Local execution: All operations are performed locally using standard system binaries (
df,du,tmutil,stat,find,mdfind) with no network connectivity or remote code execution detected.
Audit Metadata