Mac cleanup & optimization tool combining CleanMyMac, AppCleaner, DaisyDisk features. Deep cleaning, smart uninstaller, disk insights, and project artifact purge.
Security Analysis
high confidenceThe skill's stated purpose (mac cleanup) matches what it requests and instructs: it installs/runs a Homebrew 'mole' binary and tells the agent to run that binary's cleanup/optimize commands — nothing requested is out of scope.
Name/description, required binary ('mo'), and the install spec (brew formula 'mole') are consistent with a mac cleanup/optimization tool. The SKILL.md documents exactly the 'mo' commands you would expect for this purpose.
Instructions direct the agent to run destructive system-cleanup commands (clean, optimize, purge) that legitimately belong to a cleanup tool. This is expected, but these commands can delete caches, installers, build artifacts, and may require elevated privileges — the SKILL.md does warn to use --dry-run, which is good practice.
Install spec uses Homebrew (formula: mole) to provide the 'mo' binary. Homebrew is a typical, low-friction install mechanism; user should still verify the formula/tap origin before installing to ensure it points to the expected project.
No environment variables, secrets, or unrelated credentials are requested. The skill only needs the 'mo' binary and user filesystem access appropriate for a cleanup tool.
Skill is not forced-always, doesn't request persistent system-wide privileges, and doesn't modify other skills. It may require sudo at runtime for some operations, but those privileges are standard for system-cleanup actions and are not requested as credentials in the skill metadata.
Guidance
This skill appears coherent for a mac cleanup tool, but it performs potentially destructive system operations. Before installing or allowing an agent to run it: 1) verify the Homebrew 'mole' formula source (ensure it points to the expected GitHub repo) to avoid installing a malicious build; 2) always run the listed --dry-run and inspect the planned deletions; 3) back up any important data and review ~/.config/mole/purge_paths before running purge; 4) be prepared for sudo/elevation prompts and only grant them interactively after review; 5) if you do not want the agent to autonomously run destructive commands, consider disabling autonomous invocation for this skill or requiring manual confirmation before execution.
Latest Release
v1.1.0
- Added author information to the skill metadata. - Changed metadata formatting structure for improved clarity. - No changes to features or usage instructions.
More by @bjesuiter
Published by @bjesuiter on ClawHub
