Disk Watch

PassAudited by ClawScan on May 1, 2026.

Overview

Disk Watch appears to be a local disk-monitoring helper with expected filesystem and disk-command access, and no evidence of network exfiltration, credential use, or destructive cleanup actions.

Before installing, be comfortable with a local helper that runs disk-usage commands, scans directory metadata when asked, and stores a small local history file for trend tracking. The artifacts do not show credential use, network transmission, or automatic deletion/cleanup behavior.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The skill can run local disk-inspection commands on the machine where it is used.

Why it was flagged

The helper invokes local shell commands to collect disk usage. This is aligned with disk monitoring, but shell-based disk inspection is a capability users should notice.

Skill content
const output = _cp['execSync'](`df -B1 ${drive}`, { encoding: 'utf8' });
Recommendation

Use it from a trusted source, keep usage to the documented check/start flows, and avoid passing untrusted values into internal disk-command methods if extending the code.

What this means

Local disk names and usage history may remain in a temp-file history after checks run.

Why it was flagged

The skill stores disk usage history locally so it can calculate trends. This is purpose-aligned, but it creates retained local metadata about drives and usage.

Skill content
this.historyFile = options.historyFile || path.join(os.tmpdir(), 'disk-watch-history.json');
Recommendation

If drive names or capacity data are sensitive, configure an appropriate historyFile location with suitable permissions or periodically delete the history file.

What this means

If run against sensitive folders, the output could expose directory names and approximate storage usage.

Why it was flagged

The space-hog feature enumerates directory metadata under a caller-provided path. It does not read file contents in the shown code, but path names and sizes can still reveal local structure.

Skill content
async findHogs(dirPath, topN = 10) { const sizes = []; this._dirSize(dirPath, sizes, 0);
Recommendation

Run space-hog scans only on directories you intend to inspect, and avoid sharing the generated path listings if they contain sensitive project or user information.