yyl-disk-cleaner-cat
Pass
Audited by Gen Agent Trust Hub on Jun 29, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes macOS system utilities such as
du,find,df,sysctl, andosascriptviasubprocess.runto analyze disk usage and system performance. These operations are restricted to scanning and do not modify the system without user interaction. - [COMMAND_EXECUTION]: File deletion is performed using
shutil.rmtreeandrm -rf. The skill implements a robust safety check in_is_safe_to_delete()that explicitly forbids deletion of root, system directories, and critical user folders (e.g.,/System,/usr,~/Library). Furthermore, all deletions require the user to manually trigger the 'Start Cleaning' action on a local web interface. - [COMMAND_EXECUTION]: The skill manages macOS background agents using
launchctland file moves. This is limited to user-level agents (~/Library/LaunchAgents) and is designed with a restoration mechanism to reverse changes. - [DATA_EXFILTRATION]: No external network communication was detected. The
server.pybridge operates strictly on127.0.0.1to facilitate the local user interface and does not send data to remote servers. - [PROMPT_INJECTION]: The skill contains no instructions designed to bypass agent safety filters or override system prompts. It maintains a functional focus on disk management tasks.
Audit Metadata