Security audit
Security checks for vulnerabilities and agentic risk
The skill has a clear trash-emptying purpose, but it requests broad destructive shell authority and explicitly skips confirmation for irreversible deletion.
Install only if you are comfortable letting the agent permanently empty your trash/recycle bin when invoked. Review the command carefully, especially on Linux, and prefer a version that narrows allowed tool arguments and asks for explicit confirmation before deleting.
Using 'rm -rf ~/.local/share/Trash/*' grants a powerful recursive deletion primitive through a broad shell command. Although intended to empty trash, shell expansion and path-handling risks make this more dangerous than a purpose-built API call, and any mistake in execution context or path resolution can cause irreversible data loss.
rm -rf ~/.local/share/Trash/*
Using 'rm -rf ~/.local/share/Trash/*' grants a powerful recursive deletion primitive through a broad shell command. Although intended to empty trash, shell expansion and path-handling risks make this more dangerous than a purpose-built API call, and any mistake in execution context or path resolution can cause irreversible data loss.
rm -rf ~/.local/share/Trash/*
The skill explicitly performs irreversible deletion and states that no second confirmation is needed, relying solely on presumed user intent. For a destructive filesystem action, this removes an important safety barrier and increases the chance of accidental data loss from mis-triggering, ambiguous prompts, or user misunderstanding.
The description presents the skill primarily in Chinese and includes Chinese trigger phrases, without indicating that users may choose another language or locale. This can constitute a language/locale policy issue when the skill appears to assume a fixed language rather than offering user opt-in.
No suspicious patterns detected.