omarchy-free-disk-space
Pass
Audited by Gen Agent Trust Hub on Aug 10, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses system utilities like
find,du, anddfto analyze disk usage and perform cleanup. These executions are constrained by strict internal logic and an explicit allowlist of actions. - [SAFE]: Cleanup follows an 'Audit-Plan-Approve-Apply' lifecycle. No changes are made without an explicit user approval of specific, generated item IDs from a valid manifest.
- [SAFE]: The manifest system is designed for high integrity, utilizing NUL delimiters to safely handle Linux filenames and incorporating
machine-id,boot-id, and a 15-minute expiration window to prevent replay attacks or cross-machine usage. - [SAFE]: Every deletion target is subjected to a secondary validation check immediately before the action to ensure the file's properties (type, size, device, and modification time) still match the original audit, mitigating race conditions or malicious replacements.
- [SAFE]: Privilege escalation is handled transparently; the skill identifies actions requiring root permissions and provides the exact
sudocommand for the user to review and run manually.
Audit Metadata