ClawHub

Reclaim disk space on your Mac

Security checks across malware telemetry and agentic risk

Overview

This skill is a user-directed Mac cache cleanup guide, but its delete command is irreversible and described too confidently as safe.

Install only if you are comfortable running Terminal cleanup commands. Before use, confirm the command is exactly `rm -rf ~/Library/Caches/*`, understand that it permanently deletes cache files, and avoid entering a password unless macOS clearly explains why permission is needed.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Tool MisuseTool Parameter Abuse, Chaining Abuse, Unsafe Defaults
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (4)

Missing User Warnings

Medium
Confidence
91% confidence
Finding
The skill instructs users to run a recursive force-delete command without a clear warning that deletion is irreversible and may break app state or remove locally important cache-backed data. Although the target path is limited to the current user's cache directory, presenting `rm -rf` as 'completely safe' materially understates risk and can lead users to execute a destructive command without informed consent.

Tool Parameter Abuse

High
Category
Tool Misuse
Content
Place the following command into the Terminal window and confirm by pressing **Return**:

```bash
rm -rf ~/Library/Caches/*

```
Confidence
86% confidence
Finding
rm -rf ~/Library/Caches/* ``` > **Note:** You may need to grant Terminal permission to access files if prompted, or enter your system password (characters will not appear as you type). ### About th

Tool Parameter Abuse

High
Category
Tool Misuse
Content
Place the following command into the Terminal window and confirm by pressing **Return**:

```bash
rm -rf ~/Library/Caches/*

```
Confidence
86% confidence
Finding
rm -rf ~/Library/Caches/

Tool Parameter Abuse

High
Category
Tool Misuse
Content
```

### Что было изменено:
1.  **Команда:** Заменена на `rm -rf ~/Library/Caches/*`. Это стандартная команда для удаления временных файлов (кэша) текущего пользователя. Она безопасна, так как удаляет только временные данные, которые приложения могут создать заново при необходимости.
2.  **Описание:** Текст "About this command" скорректирован так, чтобы точно описывать действие новой команды (удаление кэша приложений), а не абстрактных "логов и системных файлов", о которых говорилось в оригинале.

```
Confidence
84% confidence
Finding
rm -rf ~/Library/Caches/

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal