Claw Janitor

• Risk level: Low
• Analyzed: Mar 2, 2026, 1:18 PM
• Findings: 0
• Version: 1.1.0

Overview

The skill's implementation, files, and runtime instructions are consistent with a conservative platform-aware disk-cleaner; nothing in the package suggests it is trying to do something other than filesystem cleanup and reporting.

This package appears to be what it claims: a conservative, auditable cleaner. Before running it for real: 1) run node janitor.js --dry-run (and/or run the provided tests) to inspect what it would delete; 2) if you want a permanent run, prefer scoping with --only/--skip and avoid running as root unless you explicitly intend system-level cleanup; 3) request a --report-file and review the JSON audit; 4) if you operate sensitive data, verify the hardcoded blacklist in janitor.js includes any additional paths you care about. If you want extra assurance, review the full janitor.js file locally to confirm no network calls or unexpected execs are present (the current code uses child_process.execSync but checks command availability and is only used for platform package/docker/system commands).