mac-cleaner

Warn

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: MEDIUMPRIVILEGE_ESCALATIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [PRIVILEGE_ESCALATION]: The skill utilizes sudo for administrative tasks such as deleting Time Machine local snapshots and managing system logs in /var/log within the scripts/mac-cleanup.sh script and SKILL.md manual instructions.
  • [COMMAND_EXECUTION]: The skill executes shell scripts that perform broad and destructive file deletions (rm -rf) across user-specific directories, including ~/Library/Caches, ~/Library/Developer/Xcode/DerivedData, and browser-specific cache folders for Chrome, Safari, and Firefox.
  • [INDIRECT_PROMPT_INJECTION]: The skill possesses a vulnerability surface where it ingests data from untrusted sources without sanitization.
  • Ingestion points: The scripts/mac-cleanup.sh script ingests data from system command outputs including df, du, xcrun simctl list, and find results.
  • Boundary markers: None present; the script output is directly returned to the agent context.
  • Capability inventory: The skill has significant capabilities including destructive file deletion (rm -rf, find -delete), privileged command execution (sudo tmutil), and GUI automation (osascript for emptying Trash).
  • Sanitization: Absent; the script processes external tool output through standard utilities like awk and sort without validation of the input content.
  • [DATA_EXPOSURE]: The skill performs read and analysis operations on sensitive user directories, specifically targeting iOS device backups (~/Library/Application Support/MobileSync/Backup), which can contain private communications and personal data.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Sep 15, 2026, 02:34 PM