mac-cleaner-cli-disk-cleanup

Warn

Audited by Gen Agent Trust Hub on Sep 18, 2026

Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONREMOTE_CODE_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill facilitates the download of third-party software from an external registry.
  • Instructions include npx mac-cleaner-cli and npm install -g mac-cleaner-cli to fetch the utility from the npm registry.
  • [REMOTE_CODE_EXECUTION]: The skill executes code directly from a remote source.
  • The use of npx allows for the immediate execution of the downloaded mac-cleaner-cli package.
  • [COMMAND_EXECUTION]: The tool performs extensive file deletion across multiple system and user directories.
  • It targets locations such as ~/Library/Caches, /tmp, and ~/Library/Logs, which may contain sensitive application or system data.
  • [PRIVILEGE_ESCALATION]: The skill suggests commands that require elevated system permissions.
  • Evidence includes the recommendation to use sudo for maintenance operations like sudo npx mac-cleaner-cli maintenance --dns.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Sep 18, 2026, 04:06 AM
Security Audit — agent-trust-hub — mac-cleaner-cli-disk-cleanup