skills/nubjs/nub/disk-reduction/Gen Agent Trust Hub

disk-reduction

Pass

Audited by Gen Agent Trust Hub on Sep 5, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes Python's subprocess.run to execute system utilities such as git, ps, and df. These interactions are implemented using list-based arguments, following security best practices to prevent shell injection vulnerabilities.
  • [SAFE]: The clean-shared-buckets.py script implements robust safety gates, including checks for active cargo, rustc, or rust-lld processes to prevent bucket deletion during a build. It also protects buckets referenced by installed dev binaries and the most recently created bucket used as a seed for new worktrees.
  • [SAFE]: A 'positive control' mechanism is employed where the script compares its internally calculated hash against the output of the project's own build script (rust-build.sh), refusing to perform deletions if the logic is inconsistent.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 5, 2026, 03:38 PM
Security Audit — agent-trust-hub — disk-reduction