claude-cleanup
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The utility uses the
subprocessmodule to execute system commands includingpsfor process monitoring,securityfor keychain management, andsystemsetupfor configuration. These are restricted to specific, hardcoded arguments related to the skill's stated purpose. - [PRIVILEGE_ESCALATION]: The script requests administrative privileges via
sudoto modify the system timezone. It employssudo -vto ensure the user is prompted for credentials by the operating system, and the functionality is explicitly disclosed to the user before execution. - [INDIRECT_PROMPT_INJECTION]: The tool processes local configuration data. 1. Ingestion points: Reads
~/.claude/settings.jsonand~/.claude.jsoninscripts/claude_cleanup.py. 2. Boundary markers: Employs mandatory userCONFIRMinput and strictly delimited key-based modifications. 3. Capability inventory: Includes file manipulation, process listing, and administrative system configuration. 4. Sanitization: Uses JSON schema validation and aPROTECTEDwhitelist to prevent tampering with sensitive agent assets.
Audit Metadata