Mac Cleaner - Because your Mac shouldn't have more baggage than your ex.

{
  "meta": {
    "document_id": "ssds:auto:mac-cleaner:1.0.0",
    "ssds_version": "0.2.0",
    "scanner_version": "0.4.0+fe6fd9123d50",
    "created_at": "2026-03-14T05:44:23.965Z",
    "created_by": {
      "agent": "safeagentskills-cli/generate-ssds"
    },
    "language": "en",
    "notes": "Auto-generated SSDS. Manual review recommended."
  },
  "skill": {
    "name": "Mac Cleaner - Because your Mac shouldn't have more baggage than your ex.",
    "version": "1.0.0",
    "format": "agent_skill",
    "description": "Analyze and safely clean disk space on macOS. Use when the user asks about Mac storage, \"System Data\" taking too much space, disk cleanup, freeing up space, or managing storage on macOS. Covers caches, iOS simulators, Xcode data, trash, logs, and browser caches. Safe for everyday Mac users.",
    "publisher": "ClawHub",
    "source": {
      "channel": "clawhub",
      "slug": "mac-cleaner",
      "owner": "apprithm",
      "downloads": 172,
      "stars": 0
    },
    "artifact": {
      "sha256": "9f89b1bf537b71fa8f07ba3eac244a4ce3dd25f6a6fa86b798678e1bdcd5b09b",
      "hash_method": "files_sorted"
    }
  },
  "capabilities": {
    "execution": {
      "can_exec_shell": true,
      "can_exec_code": false,
      "privilege_level": "admin",
      "can_install_deps": false,
      "can_persist": false
    },
    "filesystem": {
      "reads_workspace": false,
      "reads_user_home": true,
      "reads_system": false,
      "writes_workspace": false,
      "writes_user_home": false,
      "writes_system": false,
      "can_delete": true
    },
    "network": {
      "egress": "any",
      "ingress": false
    },
    "credentials": {
      "reads_env_vars": false,
      "reads_credential_files": false,
      "reads_browser_data": true,
      "reads_keychain": false
    },
    "services": [],
    "actions": {
      "can_send_messages": false,
      "can_post_public": false,
      "can_purchase": false,
      "can_transfer_money": false,
      "can_deploy": false,
      "can_delete_external": false
    },
    "prompt_injection_surfaces": [
      "web"
    ],
    "content_types": [
      "general"
    ]
  },
  "hazards": {
    "hdac": {
      "H": 4,
      "D": 4,
      "A": 0,
      "C": 1
    },
    "flags": [
      "EXEC",
      "PRIVILEGED",
      "FS_READ_USER",
      "FS_DELETE",
      "NET_EGRESS_ANY",
      "CREDS_BROWSER",
      "PI_WEB"
    ],
    "custom_flags": [
      {
        "code": "CRED_BROWSER",
        "name": "Browser Profile Access",
        "description": "Accesses browser cookies/profiles in: scripts/mac-cleanup.sh"
      },
      {
        "code": "PRIVILEGE_ESCALATION",
        "name": "Privilege Escalation",
        "description": "Uses elevated privileges (sudo/root) in: SKILL.md, scripts/mac-cleanup.sh"
      },
      {
        "code": "FILE_DELETE",
        "name": "File Deletion",
        "description": "Can delete files in: SKILL.md, scripts/mac-cleanup.sh"
      },
      {
        "code": "TOOL_ABUSE",
        "name": "Unauthorized Tool Use",
        "description": "MCP_SYS_FILE_DESTRUCTION, MCP_SYS_CRITICAL_ACCESS, MCP_SYS_PRIVILEGE_ESCALATION: File destruction or wiping commands"
      },
      {
        "code": "SOCIAL_ENGINEERING",
        "name": "Social Engineering Risk",
        "description": "SOCIAL_ENG_VAGUE_DESCRIPTION: Skill description is too vague or missing"
      },
      {
        "code": "COMMAND_INJECTION",
        "name": "Command Injection Risk",
        "description": "COMMAND_INJECTION_USER_INPUT: User input used in command substitution - potential injection risk"
      }
    ],
    "confidence": {
      "level": "medium",
      "basis": [
        "static_analysis"
      ],
      "notes": "Detected 6 security patterns (8 vendored rule hits). Review recommended."
    },
    "rationale": {
      "H": "H4: Critical: Privilege escalation or malware detected",
      "D": "D4: Critical: Credential theft or data exfiltration",
      "A": "A0: No side effects detected",
      "C": "C1: General content"
    }
  },
  "containment": {
    "level": "maximum",
    "required": [
      {
        "control": "SANDBOX_CONTAINER",
        "reason": "Code execution capability"
      }
    ],
    "recommended": [
      {
        "control": "LOG_ACTIONS",
        "reason": "Audit trail for all actions"
      }
    ],
    "uncontained_risk": "Risk level depends on manual review of actual capabilities."
  },
  "risks": {
    "risks": [
      {
        "risk": "Unauthorized tool use: MCP_SYS_FILE_DESTRUCTION, MCP_SYS_CRITICAL_ACCESS, MCP_SYS_PRIVILEGE_ESCALATION",
        "severity": "critical",
        "mitigation": "Remove destructive file operations."
      },
      {
        "risk": "Command injection risk: COMMAND_INJECTION_USER_INPUT",
        "severity": "medium",
        "mitigation": "Validate and sanitize all user inputs before using in commands"
      },
      {
        "risk": "Social engineering indicators: SOCIAL_ENG_VAGUE_DESCRIPTION",
        "severity": "low",
        "mitigation": "Provide clear, detailed description of skill functionality"
      }
    ],
    "limitations": [
      "Static analysis only - runtime behavior not verified"
    ]
  },
  "incident_response": {
    "kill_switch": [
      "Stop the agent process"
    ],
    "containment": [
      "Review logs for unexpected actions"
    ],
    "recovery": [
      "Depends on skill capabilities"
    ]
  },
  "evidence": [
    {
      "evidence_id": "EV:file-1",
      "type": "file_excerpt",
      "title": "_meta.json",
      "file_path": "_meta.json"
    },
    {
      "evidence_id": "EV:file-2",
      "type": "file_excerpt",
      "title": "SKILL.md",
      "file_path": "SKILL.md"
    },
    {
      "evidence_id": "EV:file-3",
      "type": "file_excerpt",
      "title": "scripts/mac-cleanup.sh",
      "file_path": "scripts/mac-cleanup.sh"
    },
    {
      "evidence_id": "EV:cisco-1",
      "type": "file_excerpt",
      "title": "SOCIAL_ENG_VAGUE_DESCRIPTION [LOW] SKILL.md:1: ---",
      "file_path": "SKILL.md"
    },
    {
      "evidence_id": "EV:cisco-2",
      "type": "file_excerpt",
      "title": "MCP_SYS_FILE_DESTRUCTION [CRITICAL] SKILL.md:95: rm -rf ~/Library/Application\\ Support/MobileSync/Backup/[FOLDER_NAME]",
      "file_path": "SKILL.md"
    },
    {
      "evidence_id": "EV:cisco-3",
      "type": "file_excerpt",
      "title": "COMMAND_INJECTION_USER_INPUT [MEDIUM] scripts/mac-cleanup.sh:72: simulators_size=$(find ~/Library/Developer/CoreSimulator/Devices -maxdepth 0 -ex",
      "file_path": "scripts/mac-cleanup.sh"
    },
    {
      "evidence_id": "EV:cisco-4",
      "type": "file_excerpt",
      "title": "MCP_SYS_FILE_DESTRUCTION [CRITICAL] scripts/mac-cleanup.sh:123: rm -rf ~/Library/Caches/*",
      "file_path": "scripts/mac-cleanup.sh"
    },
    {
      "evidence_id": "EV:cisco-5",
      "type": "file_excerpt",
      "title": "MCP_SYS_CRITICAL_ACCESS [HIGH] scripts/mac-cleanup.sh:1: #!/bin/bash",
      "file_path": "scripts/mac-cleanup.sh"
    },
    {
      "evidence_id": "EV:cisco-6",
      "type": "file_excerpt",
      "title": "MCP_SYS_PRIVILEGE_ESCALATION [CRITICAL] scripts/mac-cleanup.sh:198: local log_size=$(sudo du -sm /var/log 2>/dev/null | awk '{print $1}' || echo \"0\"",
      "file_path": "scripts/mac-cleanup.sh"
    },
    {
      "evidence_id": "EV:cisco-7",
      "type": "file_excerpt",
      "title": "MCP_SCRIPT_ANSI_DECEPTION [HIGH] scripts/mac-cleanup.sh:10: RED='\\033[0;31m'",
      "file_path": "scripts/mac-cleanup.sh"
    },
    {
      "evidence_id": "EV:cisco-8",
      "type": "file_excerpt",
      "title": "TIRITH_ANSI_ESCAPE_IN_STRING [HIGH] scripts/mac-cleanup.sh:10: RED='\\033[0;31m'",
      "file_path": "scripts/mac-cleanup.sh"
    }
  ]
}