yyl-disk-cleaner-cat

Pass

Audited by Gen Agent Trust Hub on Jun 29, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes macOS system utilities such as du, find, df, sysctl, and osascript via subprocess.run to analyze disk usage and system performance. These operations are restricted to scanning and do not modify the system without user interaction.
  • [COMMAND_EXECUTION]: File deletion is performed using shutil.rmtree and rm -rf. The skill implements a robust safety check in _is_safe_to_delete() that explicitly forbids deletion of root, system directories, and critical user folders (e.g., /System, /usr, ~/Library). Furthermore, all deletions require the user to manually trigger the 'Start Cleaning' action on a local web interface.
  • [COMMAND_EXECUTION]: The skill manages macOS background agents using launchctl and file moves. This is limited to user-level agents (~/Library/LaunchAgents) and is designed with a restoration mechanism to reverse changes.
  • [DATA_EXFILTRATION]: No external network communication was detected. The server.py bridge operates strictly on 127.0.0.1 to facilitate the local user interface and does not send data to remote servers.
  • [PROMPT_INJECTION]: The skill contains no instructions designed to bypass agent safety filters or override system prompts. It maintains a functional focus on disk management tasks.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 29, 2026, 07:43 PM
Security Audit — agent-trust-hub — yyl-disk-cleaner-cat