disk-hygiene
Facilitates macOS disk cleanup by auditing usage, cleaning caches, and managing stale files for improved storage efficiency.
Install this skill
Security score
The disk-hygiene skill was audited on May 16, 2026 and we found 14 security issues across 2 threat categories, including 1 high-severity. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 140 | ```bash |
Template literal with variable interpolation in command context
| 196 | ```bash |
Template literal with variable interpolation in command context
| 297 | | `parse error near TASK_ID=$(pueue add ...)` from heredoc with spaced paths | A user shell hook (e.g. pueue submission) re-parses the command string and breaks on `${var}/Path With Spaces/*` globs in |
Access to hidden dotfiles in home directory
| 77 | ~/.Trash ~/Downloads ~/Documents ~/Desktop ~/Movies ~/Music ~/Pictures \ |
Access to hidden dotfiles in home directory
| 82 | du -sh ~/.docker ~/.npm ~/.cargo ~/.rustup ~/.local ~/.cache \ |
Access to hidden dotfiles in home directory
| 83 | ~/.conda ~/.pyenv ~/.local/share/mise 2>/dev/null | sort -rh |
Access to hidden dotfiles in home directory
| 96 | | npm | `~/.npm/_cacache/` | 0.5-2 GB | `npm cache clean --force` | |
Access to hidden dotfiles in home directory
| 97 | | cargo | `~/.cargo/registry/cache/` | 1-5 GB | `cargo cache -a` (needs cargo-cache) | |
Access to hidden dotfiles in home directory
| 98 | | rustup | `~/.rustup/toolchains/` | 2-10 GB | `rustup toolchain uninstall <name>` (list with `rustup toolchain list`) | |
Access to hidden dotfiles in home directory
| 99 | | mise | `~/.local/share/mise/installs/<tool>/<version>/` | 0.2-2 GB each | `mise uninstall <tool>@<version>` (list with `mise ls`) | |
Access to hidden dotfiles in home directory
| 104 | | huggingface | `~/.cache/huggingface/` | 1-10 GB | `rm -rf ~/.cache/huggingface/hub/<model>` | |
Access to hidden dotfiles in home directory
| 116 | echo "npm: $(du -sh ~/.npm/_cacache/ 2>/dev/null | cut -f1 || echo 'N/A')" |
Access to hidden dotfiles in home directory
| 180 | | TTS debug WAV | `~/.local/share/tts-debug-wav/`, `~/.local/share/kokoro-debug*/` | Debug-mode TTS audio captures — can grow 1-2 GB/day if debug mode left on. Look for a `tts-prune` mise task |
Access to hidden dotfiles in home directory
| 273 | | Empty Trash | Variable | Irreversible | `rm -rf ~/.Trash/*` | |