puremac-macos-cleaner
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs users to fetch the application and its source code from GitHub repositories (e.g.,
github.com/momenbasel/PureMac). These references target a well-known service and are documented as the official sources for the project. - [COMMAND_EXECUTION]: Provides instructions for building the application from source using
xcodegenandxcodebuild. It also includes Swift code that utilizesProcess()to execute shell commands via/bin/bash -cfor interacting with system utilities liketmutilto manage local snapshots. - [INDIRECT_PROMPT_INJECTION]: The skill describes an application logic (
ScannerService.swift) that ingests untrusted data from the local filesystem by scanning file names and metadata. While the application possesses deletion capabilities, the risk is mitigated by explicit user selection requirements for large files and prefix-based filtering for system snapshots.
Audit Metadata