mac-optimizer
Pass
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes multiple macOS diagnostic utilities including
ps,sysctl,vm_stat,pmset, andnetstatvia themac-optimize.shscript to gather performance metrics. - [PRIVILEGE_ESCALATION]: The skill provides instructions for the user to run commands using
sudoto perform specific optimizations, such assudo purge,sudo pmset, andsudo launchctl. These are standard macOS administrative commands for the requested tasks and are presented as recommendations for the user to execute manually. - [INDIRECT_PROMPT_INJECTION]: The skill ingests and analyzes external system data (process lists, launch agents, disk usage) which could theoretically contain malicious instructions.
- Ingestion points: System metrics gathered by
mac-optimize.shand processed by the agent. - Boundary markers: None identified in the prompt interpolation; the agent is instructed to analyze the raw output of the script.
- Capability inventory: The skill has
Bashaccess but primarily uses it for read-only diagnostics; optimization commands are recommended to the user rather than executed automatically. - Sanitization: The
mac-optimize.shscript includes aredact()function usingsedto mask common sensitive patterns (tokens, keys, passwords) in process arguments before the agent sees them. - [SAFE]: The skill documentation and implementation align with its stated purpose of system optimization. The script uses built-in system tools and does not download external dependencies or communicate with remote servers.
Audit Metadata