@tank/macos-cleanup

Warn

Audited by Gen Agent Trust Hub on May 31, 2026

Risk Level: MEDIUMCOMMAND_EXECUTIONPROMPT_INJECTIONSAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes rm -rf commands to clean various directories, including user caches (~/Library/Caches), logs (~/Library/Logs), and developer tool artifacts such as Xcode DerivedData and npm caches.
  • [COMMAND_EXECUTION]: The scripts/analyze-disk.sh script executes filesystem discovery commands including du, find, and stat across the user's home directory and system paths to generate usage reports.
  • [PRIVILEGE_ESCALATION]: The skill instructions and reference files contain patterns for executing commands with elevated privileges using sudo. This is specifically used for managing Time Machine local snapshots via tmutil and cleaning system-level logs in /var/log/.
  • [DATA_EXPOSURE]: The analysis script and cleanup instructions involve scanning a wide range of user and system directories, including ~/Downloads, ~/Library/Application Support, and various hidden configuration directories (e.g., .npm, .cargo) to identify space savings.
Audit Metadata
Risk Level
MEDIUM
Analyzed
May 31, 2026, 11:04 PM
Security Audit — agent-trust-hub — @tank/macos-cleanup