mac-cleaner
Warn
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: MEDIUMPRIVILEGE_ESCALATIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [PRIVILEGE_ESCALATION]: The skill utilizes
sudofor administrative tasks such as deleting Time Machine local snapshots and managing system logs in/var/logwithin thescripts/mac-cleanup.shscript andSKILL.mdmanual instructions. - [COMMAND_EXECUTION]: The skill executes shell scripts that perform broad and destructive file deletions (
rm -rf) across user-specific directories, including~/Library/Caches,~/Library/Developer/Xcode/DerivedData, and browser-specific cache folders for Chrome, Safari, and Firefox. - [INDIRECT_PROMPT_INJECTION]: The skill possesses a vulnerability surface where it ingests data from untrusted sources without sanitization.
- Ingestion points: The
scripts/mac-cleanup.shscript ingests data from system command outputs includingdf,du,xcrun simctl list, andfindresults. - Boundary markers: None present; the script output is directly returned to the agent context.
- Capability inventory: The skill has significant capabilities including destructive file deletion (
rm -rf,find -delete), privileged command execution (sudo tmutil), and GUI automation (osascriptfor emptying Trash). - Sanitization: Absent; the script processes external tool output through standard utilities like
awkandsortwithout validation of the input content. - [DATA_EXPOSURE]: The skill performs read and analysis operations on sensitive user directories, specifically targeting iOS device backups (
~/Library/Application Support/MobileSync/Backup), which can contain private communications and personal data.
Audit Metadata