macos-cleaner

skills-sh:daymade_claude-code-skills__macos-cleaner

View source
A
92/100

First Seen

Feb 18, 2026

Last Scanned

Feb 20, 2026

Findings

32

Score

92/100

MEDIUM 1
LOW 31

Findings (32)

MEDIUM
Privilege escalation
L934

Detects privilege escalation patterns like setuid, chown root, or sudo with shell commands

sudo rm -rf
FIX

Avoid depending on packages that could be subject to typosquatting or name confusion. Verify package ownership, check download counts, and audit the package source before adding dependencies.

FP?

Likely FP if the flagged package is a well-known, high-download-count package from a verified publisher.

LOW
System package manager install
L66

Detects system-level package installation via brew, apt, yum, or dnf

brew install t
FIX

Pin system packages to specific versions where the package manager supports it. Document the exact packages required and prefer containerized environments to avoid system-wide changes.

FP?

Likely FP if the match is standard setup documentation listing well-known system packages (e.g., apt install git curl) that are prerequisites.

LOW
Terminal multiplexer command injection
L101

Detects tmux/screen send-keys used to inject commands into terminal sessions

tmux send-keys 
FIX

Avoid sending unsanitized user input to tmux/screen sessions via send-keys. Use a controlled command dispatch mechanism instead of injecting commands into terminal multiplexers.

FP?

Likely FP if the match is in documentation describing tmux/screen workflow automation for the user themselves, not controlled by an external agent.

LOW
Terminal multiplexer command injection
L109

Detects tmux/screen send-keys used to inject commands into terminal sessions

tmux send-keys 
FIX

Avoid sending unsanitized user input to tmux/screen sessions via send-keys. Use a controlled command dispatch mechanism instead of injecting commands into terminal multiplexers.

FP?

Likely FP if the match is in documentation describing tmux/screen workflow automation for the user themselves, not controlled by an external agent.

LOW
Terminal multiplexer command injection
L110

Detects tmux/screen send-keys used to inject commands into terminal sessions

tmux send-keys 
FIX

Avoid sending unsanitized user input to tmux/screen sessions via send-keys. Use a controlled command dispatch mechanism instead of injecting commands into terminal multiplexers.

FP?

Likely FP if the match is in documentation describing tmux/screen workflow automation for the user themselves, not controlled by an external agent.

LOW
Terminal multiplexer command injection
L111

Detects tmux/screen send-keys used to inject commands into terminal sessions

tmux send-keys 
FIX

Avoid sending unsanitized user input to tmux/screen sessions via send-keys. Use a controlled command dispatch mechanism instead of injecting commands into terminal multiplexers.

FP?

Likely FP if the match is in documentation describing tmux/screen workflow automation for the user themselves, not controlled by an external agent.

LOW
Terminal multiplexer command injection
L117

Detects tmux/screen send-keys used to inject commands into terminal sessions

tmux send-keys 
FIX

Avoid sending unsanitized user input to tmux/screen sessions via send-keys. Use a controlled command dispatch mechanism instead of injecting commands into terminal multiplexers.

FP?

Likely FP if the match is in documentation describing tmux/screen workflow automation for the user themselves, not controlled by an external agent.

LOW
System package manager install
L341

Detects system-level package installation via brew, apt, yum, or dnf

brew install t
FIX

Pin system packages to specific versions where the package manager supports it. Document the exact packages required and prefer containerized environments to avoid system-wide changes.

FP?

Likely FP if the match is standard setup documentation listing well-known system packages (e.g., apt install git curl) that are prerequisites.

LOW
Terminal multiplexer command injection
L357

Detects tmux/screen send-keys used to inject commands into terminal sessions

tmux send-keys 
FIX

Avoid sending unsanitized user input to tmux/screen sessions via send-keys. Use a controlled command dispatch mechanism instead of injecting commands into terminal multiplexers.

FP?

Likely FP if the match is in documentation describing tmux/screen workflow automation for the user themselves, not controlled by an external agent.

LOW
Terminal multiplexer command injection
L395

Detects tmux/screen send-keys used to inject commands into terminal sessions

tmux send-keys 
FIX

Avoid sending unsanitized user input to tmux/screen sessions via send-keys. Use a controlled command dispatch mechanism instead of injecting commands into terminal multiplexers.

FP?

Likely FP if the match is in documentation describing tmux/screen workflow automation for the user themselves, not controlled by an external agent.

LOW
Terminal multiplexer command injection
L401

Detects tmux/screen send-keys used to inject commands into terminal sessions

tmux send-keys 
FIX

Avoid sending unsanitized user input to tmux/screen sessions via send-keys. Use a controlled command dispatch mechanism instead of injecting commands into terminal multiplexers.

FP?

Likely FP if the match is in documentation describing tmux/screen workflow automation for the user themselves, not controlled by an external agent.

LOW
Terminal multiplexer command injection
L402

Detects tmux/screen send-keys used to inject commands into terminal sessions

tmux send-keys 
FIX

Avoid sending unsanitized user input to tmux/screen sessions via send-keys. Use a controlled command dispatch mechanism instead of injecting commands into terminal multiplexers.

FP?

Likely FP if the match is in documentation describing tmux/screen workflow automation for the user themselves, not controlled by an external agent.

LOW
Terminal multiplexer command injection
L403

Detects tmux/screen send-keys used to inject commands into terminal sessions

tmux send-keys 
FIX

Avoid sending unsanitized user input to tmux/screen sessions via send-keys. Use a controlled command dispatch mechanism instead of injecting commands into terminal multiplexers.

FP?

Likely FP if the match is in documentation describing tmux/screen workflow automation for the user themselves, not controlled by an external agent.

LOW
Terminal multiplexer command injection
L404

Detects tmux/screen send-keys used to inject commands into terminal sessions

tmux send-keys 
FIX

Avoid sending unsanitized user input to tmux/screen sessions via send-keys. Use a controlled command dispatch mechanism instead of injecting commands into terminal multiplexers.

FP?

Likely FP if the match is in documentation describing tmux/screen workflow automation for the user themselves, not controlled by an external agent.

LOW
Terminal multiplexer command injection
L405

Detects tmux/screen send-keys used to inject commands into terminal sessions

tmux send-keys 
FIX

Avoid sending unsanitized user input to tmux/screen sessions via send-keys. Use a controlled command dispatch mechanism instead of injecting commands into terminal multiplexers.

FP?

Likely FP if the match is in documentation describing tmux/screen workflow automation for the user themselves, not controlled by an external agent.

LOW
Terminal multiplexer command injection
L416

Detects tmux/screen send-keys used to inject commands into terminal sessions

tmux send-keys 
FIX

Avoid sending unsanitized user input to tmux/screen sessions via send-keys. Use a controlled command dispatch mechanism instead of injecting commands into terminal multiplexers.

FP?

Likely FP if the match is in documentation describing tmux/screen workflow automation for the user themselves, not controlled by an external agent.

LOW
Terminal multiplexer command injection
L428

Detects tmux/screen send-keys used to inject commands into terminal sessions

tmux send-keys 
FIX

Avoid sending unsanitized user input to tmux/screen sessions via send-keys. Use a controlled command dispatch mechanism instead of injecting commands into terminal multiplexers.

FP?

Likely FP if the match is in documentation describing tmux/screen workflow automation for the user themselves, not controlled by an external agent.

LOW
Terminal multiplexer command injection
L442

Detects tmux/screen send-keys used to inject commands into terminal sessions

tmux send-keys 
FIX

Avoid sending unsanitized user input to tmux/screen sessions via send-keys. Use a controlled command dispatch mechanism instead of injecting commands into terminal multiplexers.

FP?

Likely FP if the match is in documentation describing tmux/screen workflow automation for the user themselves, not controlled by an external agent.

LOW
Terminal multiplexer command injection
L454

Detects tmux/screen send-keys used to inject commands into terminal sessions

tmux send-keys 
FIX

Avoid sending unsanitized user input to tmux/screen sessions via send-keys. Use a controlled command dispatch mechanism instead of injecting commands into terminal multiplexers.

FP?

Likely FP if the match is in documentation describing tmux/screen workflow automation for the user themselves, not controlled by an external agent.

LOW
Terminal multiplexer command injection
L458

Detects tmux/screen send-keys used to inject commands into terminal sessions

tmux send-keys 
FIX

Avoid sending unsanitized user input to tmux/screen sessions via send-keys. Use a controlled command dispatch mechanism instead of injecting commands into terminal multiplexers.

FP?

Likely FP if the match is in documentation describing tmux/screen workflow automation for the user themselves, not controlled by an external agent.

LOW
Terminal multiplexer command injection
L465

Detects tmux/screen send-keys used to inject commands into terminal sessions

tmux send-keys 
FIX

Avoid sending unsanitized user input to tmux/screen sessions via send-keys. Use a controlled command dispatch mechanism instead of injecting commands into terminal multiplexers.

FP?

Likely FP if the match is in documentation describing tmux/screen workflow automation for the user themselves, not controlled by an external agent.

LOW
Terminal multiplexer command injection
L466

Detects tmux/screen send-keys used to inject commands into terminal sessions

tmux send-keys 
FIX

Avoid sending unsanitized user input to tmux/screen sessions via send-keys. Use a controlled command dispatch mechanism instead of injecting commands into terminal multiplexers.

FP?

Likely FP if the match is in documentation describing tmux/screen workflow automation for the user themselves, not controlled by an external agent.

LOW
Terminal multiplexer command injection
L512

Detects tmux/screen send-keys used to inject commands into terminal sessions

tmux send-keys 
FIX

Avoid sending unsanitized user input to tmux/screen sessions via send-keys. Use a controlled command dispatch mechanism instead of injecting commands into terminal multiplexers.

FP?

Likely FP if the match is in documentation describing tmux/screen workflow automation for the user themselves, not controlled by an external agent.

LOW
Terminal multiplexer command injection
L516

Detects tmux/screen send-keys used to inject commands into terminal sessions

tmux send-keys 
FIX

Avoid sending unsanitized user input to tmux/screen sessions via send-keys. Use a controlled command dispatch mechanism instead of injecting commands into terminal multiplexers.

FP?

Likely FP if the match is in documentation describing tmux/screen workflow automation for the user themselves, not controlled by an external agent.

LOW
Terminal multiplexer command injection
L520

Detects tmux/screen send-keys used to inject commands into terminal sessions

tmux send-keys 
FIX

Avoid sending unsanitized user input to tmux/screen sessions via send-keys. Use a controlled command dispatch mechanism instead of injecting commands into terminal multiplexers.

FP?

Likely FP if the match is in documentation describing tmux/screen workflow automation for the user themselves, not controlled by an external agent.

LOW
Terminal multiplexer command injection
L524

Detects tmux/screen send-keys used to inject commands into terminal sessions

tmux send-keys 
FIX

Avoid sending unsanitized user input to tmux/screen sessions via send-keys. Use a controlled command dispatch mechanism instead of injecting commands into terminal multiplexers.

FP?

Likely FP if the match is in documentation describing tmux/screen workflow automation for the user themselves, not controlled by an external agent.

LOW
Terminal multiplexer command injection
L526

Detects tmux/screen send-keys used to inject commands into terminal sessions

tmux send-keys 
FIX

Avoid sending unsanitized user input to tmux/screen sessions via send-keys. Use a controlled command dispatch mechanism instead of injecting commands into terminal multiplexers.

FP?

Likely FP if the match is in documentation describing tmux/screen workflow automation for the user themselves, not controlled by an external agent.

LOW
Terminal multiplexer command injection
L530

Detects tmux/screen send-keys used to inject commands into terminal sessions

tmux send-keys 
FIX

Avoid sending unsanitized user input to tmux/screen sessions via send-keys. Use a controlled command dispatch mechanism instead of injecting commands into terminal multiplexers.

FP?

Likely FP if the match is in documentation describing tmux/screen workflow automation for the user themselves, not controlled by an external agent.

LOW
Terminal multiplexer command injection
L532

Detects tmux/screen send-keys used to inject commands into terminal sessions

tmux send-keys 
FIX

Avoid sending unsanitized user input to tmux/screen sessions via send-keys. Use a controlled command dispatch mechanism instead of injecting commands into terminal multiplexers.

FP?

Likely FP if the match is in documentation describing tmux/screen workflow automation for the user themselves, not controlled by an external agent.

LOW
Terminal multiplexer command injection
L536

Detects tmux/screen send-keys used to inject commands into terminal sessions

tmux send-keys 
FIX

Avoid sending unsanitized user input to tmux/screen sessions via send-keys. Use a controlled command dispatch mechanism instead of injecting commands into terminal multiplexers.

FP?

Likely FP if the match is in documentation describing tmux/screen workflow automation for the user themselves, not controlled by an external agent.

LOW
Terminal multiplexer command injection
L540

Detects tmux/screen send-keys used to inject commands into terminal sessions

tmux send-keys 
FIX

Avoid sending unsanitized user input to tmux/screen sessions via send-keys. Use a controlled command dispatch mechanism instead of injecting commands into terminal multiplexers.

FP?

Likely FP if the match is in documentation describing tmux/screen workflow automation for the user themselves, not controlled by an external agent.

LOW
Terminal multiplexer command injection
L544

Detects tmux/screen send-keys used to inject commands into terminal sessions

tmux send-keys 
FIX

Avoid sending unsanitized user input to tmux/screen sessions via send-keys. Use a controlled command dispatch mechanism instead of injecting commands into terminal multiplexers.

FP?

Likely FP if the match is in documentation describing tmux/screen workflow automation for the user themselves, not controlled by an external agent.