mac-disk-reclaim
Pass
Audited by Gen Agent Trust Hub on Jul 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes standard macOS utilities and local Python scripts to discover bloat and perform cleanup operations.
- Evidence:
scripts/scan_reclaimable.pyexecutes system commands includingdu,find,git, andtmutilviasubprocess.runto analyze disk usage.scripts/safe_delete.pyperforms permanent file and directory removal usingshutil.rmtreeandpath.unlinkonce a path is validated.- [PROMPT_INJECTION]: The skill presents an indirect prompt injection surface by ingesting and processing untrusted directory and file names from the user's local filesystem (Category 8).
- Ingestion points: File and directory paths are read from the
$HOMEdirectory byscripts/scan_reclaimable.pyduring its discovery sweep. - Boundary markers: The skill does not use specific delimiters or instructions to prevent the agent from interpreting file names as commands, though the structured output and script-based deletion mitigate this risk.
- Capability inventory: The agent can permanently delete files and execute tool-specific cleanup commands (e.g.,
git gc,brew cleanup). - Sanitization:
scripts/safe_delete.pyimplements comprehensive sanitization by checking paths against an extensiveDENY_PREFIXESlist (protecting sensitive user data and system volumes) and validating them against aPURGE_DIR_NAMESallowlist.
Audit Metadata