mac-software-storage-cleanup
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses local shell scripts to perform system auditing and cleanup tasks. These scripts employ standard utilities (du, find, rm) to calculate directory sizes and remove cache files. The scripts are properly quoted and handle file paths with spaces safely.
- [INDIRECT_PROMPT_INJECTION]: The skill reads and reports on file and directory names found on the local filesystem, which could theoretically contain malicious instructions intended to influence the agent.
- Ingestion points: scripts/report_sizes.sh and scripts/list_priority2_candidates.sh read file and directory names from the filesystem.
- Boundary markers: Absent; filenames are processed directly.
- Capability inventory: scripts/cleanup_priority1.sh (uses rm -rf to delete directories).
- Sanitization: Absent; the tool reports raw names and sizes.
Audit Metadata