disk-hygiene
Facilitates macOS disk cleanup by auditing usage, cleaning caches, and managing stale files for improved storage efficiency.
Install this skill
Security score
The disk-hygiene skill was audited on May 12, 2026 and we found 12 security issues across 2 threat categories, including 1 high-severity. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 138 | ```bash |
Template literal with variable interpolation in command context
| 193 | ```bash |
Template literal with variable interpolation in command context
| 292 | | `parse error near TASK_ID=$(pueue add ...)` from heredoc with spaced paths | A user shell hook (e.g. pueue submission) re-parses the command string and breaks on `${var}/Path With Spaces/*` globs in |
Access to hidden dotfiles in home directory
| 77 | ~/.Trash ~/Downloads ~/Documents ~/Desktop ~/Movies ~/Music ~/Pictures \ |
Access to hidden dotfiles in home directory
| 82 | du -sh ~/.docker ~/.npm ~/.cargo ~/.rustup ~/.local ~/.cache \ |
Access to hidden dotfiles in home directory
| 83 | ~/.conda ~/.pyenv ~/.local/share/mise 2>/dev/null | sort -rh |
Access to hidden dotfiles in home directory
| 96 | | npm | `~/.npm/_cacache/` | 0.5-2 GB | `npm cache clean --force` | |
Access to hidden dotfiles in home directory
| 97 | | cargo | `~/.cargo/registry/cache/` | 1-5 GB | `cargo cache -a` (needs cargo-cache) | |
Access to hidden dotfiles in home directory
| 98 | | rustup | `~/.rustup/toolchains/` | 2-8 GB | `rustup toolchain remove <old>` | |
Access to hidden dotfiles in home directory
| 102 | | huggingface | `~/.cache/huggingface/` | 1-10 GB | `rm -rf ~/.cache/huggingface/hub/<model>` | |
Access to hidden dotfiles in home directory
| 114 | echo "npm: $(du -sh ~/.npm/_cacache/ 2>/dev/null | cut -f1 || echo 'N/A')" |
Access to hidden dotfiles in home directory
| 268 | | Empty Trash | Variable | Irreversible | `rm -rf ~/.Trash/*` | |