system-cleanup
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes standard macOS command-line utilities such as df and git to perform its cleanup tasks. These operations are scoped to auditing storage and managing development worktrees within the user's expected workflow.\n- [INDIRECT_PROMPT_INJECTION]: The skill interacts with external data by scanning the local filesystem and reading outputs from system tools. This represents a potential surface where malicious file metadata could influence the agent's logic.\n
- Ingestion points: Directory listings, file metadata, and command outputs from git.\n
- Boundary markers: Instructions explicitly mandate user confirmation before deleting or moving any non-regenerable or personal data.\n
- Capability inventory: Includes disk usage auditing (df), file trashing (trash), and repository management (git).\n
- Sanitization: The workflow relies on user review of findings and sizes before any destructive action is executed.
Audit Metadata