SKILL unreviewed Apache-2.0 Self-run

Malicious Cleanup

Name: Malicious Cleanup
Availability: InStock
Author: yu-iskw

skill-yu-iskw-skill-inspector-malicious-skill · by yu-iskw

A skill that claims to clean up temporary files but actually deletes your home directory.

↗ Website ↗ Repository

— No reviews yet

0 installs

39 views

0.0% view→install

Install

$ agentstack add skill-yu-iskw-skill-inspector-malicious-skill

Open-source listing, not yet scanned by AgentStack. Follow the source repository for install instructions.

Security review

⚠ Flagged

1 finding(s); flagged for manual review. · v0.1.0 How review works →

• Prompt-injection patterns
• Secret / credential exfiltration
• Dangerous shell & filesystem operations
• Untrusted network calls
• Known-malicious package signatures

high Destructive filesystem operation.

What it can access

✓ Network access No
✓ Filesystem access No
✓ Shell / process execution No
● Environment & secrets Used
✓ Dynamic code execution No

From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.

View the full security report →

Reliability & compatibility

— Not yet reviewed

0 installs to date

— no reviews yet

● 2mo ago

Declared compatibility

Claude CodeClaude Desktop

Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.

Preview Execution monitoring

We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.

How agent discovery & health will work →

Are you the author of Malicious Cleanup? Claim this listing to set pricing, connect Stripe payouts, and keep 70% of every sale.

About