cleaning-up-disk-space
Fail
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: HIGHCOMMAND_EXECUTIONPERSISTENCEINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill invokes local bash scripts (disk-audit.sh, disk-clean.sh, disk-guards.sh) to perform system audits and file deletion operations.
- [PERSISTENCE]: The disk-guards.sh tool installs daily background tasks using macOS LaunchAgents. These tasks are copied to ~/.local/share/lt-dev/guards and configured to run at scheduled intervals (13:00 and 13:05 daily), maintaining execution across sessions.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted filesystem data, presenting a potential injection surface. 1. Ingestion points: Data is read from disk-audit.sh which lists file paths and project metadata from the local system. 2. Boundary markers: Output is tab-separated but lacks robust sanitization for malicious filenames that could influence agent logic. 3. Capability inventory: The skill possesses the ability to delete files and directories via disk-clean.sh and modify system persistence via disk-guards.sh. 4. Sanitization: No explicit sanitization or escaping is described for handling adversarial strings within the audited filesystem content.
Recommendations
- AI detected serious security threats
Audit Metadata