ClawHub
Back to skill

Security audit

Reclaim disk space on your Mac

Security checks across malware telemetry and agentic risk

Overview

This is a simple Mac cache-cleanup guide, but users should understand that its Terminal command permanently deletes cache files.

Install only if you are comfortable following Terminal cleanup instructions. Before running anything, verify the command is exactly `rm -rf ~/Library/Caches/*`, understand that it permanently deletes cache files, and avoid entering a password unless macOS clearly explains why permission is needed.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)

Missing User Warnings

Medium
Confidence
94% confidence
Finding
The skill instructs users to run `rm -rf ~/Library/Caches/*`, a recursive force-delete command, while framing it as broadly safe and not emphasizing deletion risk, reversibility limits, or possible application side effects. Even though the target is user cache data rather than personal documents, destructive shell commands can cause unintended loss of app state, offline data, or troubleshooting artifacts, and the reassuring language increases the chance of uncritical execution.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.