disk-cleaner
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
subprocess.runto interact with OS-level utilities likeps,lsof,taskkill,handle.exe, andopenfiles. These calls are used to detect processes that are locking files and to monitor disk usage. This is standard behavior for a disk management tool and is implemented using safe practices (list-based arguments without shell interpretation). - [DYNAMIC_EXECUTION]: The
skill_bootstrap.pymodule uses__import__to verify the availability of its core modules in different environments. Additionally,check_skill.pyusescompile()to verify the syntax of the package's scripts as part of a diagnostic test. Both uses are restricted to the local package context and are functional in nature. - [INDIRECT_PROMPT_INJECTION]: The skill presents file and directory names from the local filesystem to the agent, creating a data ingestion surface.
- Ingestion points:
diskcleaner/core/scanner.pyreads directory entries and metadata. - Boundary markers:
SKILL.mddefines strict ASCII-safe output markers (e.g.,[OK],[!]) for scripts and provides templates for agent-to-human reporting. - Capability inventory: The skill possesses file deletion capabilities (
scripts/clean_disk.py) and process termination capabilities (diskcleaner/core/process_manager.py). - Sanitization: While filenames are processed as raw strings, the skill enforces safety through
dry-rundefaults and requires explicit user confirmation (e.g., typing 'YES' or 'I UNDERSTAND') before performing destructive operations.
Audit Metadata