Mole Mac Cleanup

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent may help run commands that remove caches, logs, browser data, Trash contents, project artifacts, or alter system services.

Why it was flagged

The skill exposes commands that can delete files and alter system behavior. This is expected for a Mac cleanup tool, and dry-run is emphasized for cleanup and optimization, but users should still review before executing.

Skill content
`mo clean` # Run deep cleanup ... `mo optimize` # Rebuild caches, reset services ... `mo purge` # Clean old build artifacts
Recommendation

Use `--dry-run --debug` where available, review the planned changes, and only then approve actual cleanup or optimization commands.

What this means

Changing sudo/Touch ID behavior can affect how administrative actions are authorized on the Mac.

Why it was flagged

The skill documents a command that changes sudo convenience behavior. This is plausibly related to system maintenance, but it involves elevated local privilege configuration.

Skill content
`mo touchid` # Configure Touch ID for sudo
Recommendation

Only run `mo touchid` if you understand the sudo change and want Touch ID enabled for administrative prompts.

What this means

The actual cleanup behavior comes from the installed `mo` binary supplied by Homebrew.

Why it was flagged

The skill depends on an external Homebrew package rather than bundled code. This is disclosed and purpose-aligned, but users are trusting the Homebrew formula and upstream Mole CLI.

Skill content
brew | formula: mole | creates binaries: mo
Recommendation

Install from trusted Homebrew sources and review the upstream Mole project if you need stronger assurance before granting it cleanup authority.