sgc-macos-disk-optimizer
Pass
Audited by Gen Agent Trust Hub on Aug 21, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/disk_optimizer.pyexecutes system commandsduandrsyncviasubprocess.runto calculate disk usage and perform file migrations. These operations are constrained by path validation logic that prevents execution against root or system directories and requires explicit user confirmation flags to proceed. - [SAFE]: The skill implements significant defensive coding practices including path normalization to prevent directory traversal, a rollback system using the macOS Trash, and a white-list approach for rebuildable data cleanup. Sensitive system paths and user data like Keychains, Mail, and Git history are explicitly protected from optimization workflows.
Audit Metadata