Is storage-analyzer safe to install?

No critical findings, some security notes. The scan covers prompt injection, hidden Unicode, remote code execution and credential access in every text file of the skill. It cannot judge intent, so read any flagged line in context before installing.

How was this score calculated?

Four checks of 25 points each: spec, efficiency, clarity and security. Findings take points off the check they belong to, and any critical finding caps the grade at F. The same scanner runs in your browser at proskills.dev/scan.

Is this report current?

It was made from commit 322346d on 2026-10-19. If the skill has changed since, paste the new version into the scanner for a fresh score.

I wrote this skill. Can I fix the score or have the page removed?

Fix the findings and push. The reports are rebuilt from GitHub on a schedule, so the next run picks the change up. To have the page removed, open an issue on the ProSkills GitHub repo.

Scan reports · KKKKhazix/khazix-skills

storage-analyzer: scan report

macOS / Windows 只读存储分析助手（自动识别系统）。扫描整机磁盘占用，找出占空间大户，把每一项分成 🟢可自动清理 / 🟡需人工判断 / 🔴谨慎清理三级并给出可执行处置方案，生成排版精美、可折叠、命令可一键复制的交互式 HTML 报告，并可起本地服务在网页上一键删除（移废纸篓/直接删）。扫描全程只读。务必在以下场景使用：用户说"存储分析""磁盘满了""C盘/硬盘满了""空间不够""清理空间"… An automated scan of this public skill from KKKKhazix/khazix-skills: security, token cost, spec and clarity, with every finding and its fix.

Result

Verdict

storage-analyzer

80/100 · grade B

KKKKhazix/khazix-skills/storage-analyzer at 322346d

Spec 21 · Efficiency 19 · Clarity 21 · Security 19 (each out of 25)

Always loaded 117 tokens · on trigger 1,272 · on demand 12,141

eff/description-trigger warn · SKILL.mddescription doesn't say *when* to use the skill ("Use when …"). Agents decide from this line alone.
sec/obfuscation warn · assets/report_template.html:299Decodes or evaluates hidden code. Reads as an example or a warning here; check it in context.
spec/broken-ref warn · SKILL.md:67References server.py, which isn't in the skill folder.
clarity/output warn · SKILL.mdDoesn't say what the result should look like. Add an Output section.

Where it comes from

Source

Fact	Value
Repository	KKKKhazix/khazix-skills
Skill folder	storage-analyzer
Stars	21,504
License	MIT
Commit scanned	322346d
Scanned	2026-10-19
Files	7

ProSkills doesn't host or redistribute this skill. Get it from its repository, and check the license before reusing it. Something wrong here? Open an issue for a rescan or removal.

For maintainers

Badge for the README

If you maintain this skill, this badge shows its score and links to this report. Fix findings and the score moves with the next scan.

[![ProSkills scan 80/100](https://proskills.dev/badge?score=80)](https://proskills.dev/reports/kkkkhazix-storage-analyzer)

Same repository

More from KKKKhazix/khazix-skills

FAQ

Questions

Is storage-analyzer safe to install?: No critical findings, some security notes. The scan covers prompt injection, hidden Unicode, remote code execution and credential access in every text file of the skill. It cannot judge intent, so read any flagged line in context before installing.
How was this score calculated?: Four checks of 25 points each: spec, efficiency, clarity and security. Findings take points off the check they belong to, and any critical finding caps the grade at F. The same scanner runs in your browser at proskills.dev/scan.
Is this report current?: It was made from commit 322346d on 2026-10-19. If the skill has changed since, paste the new version into the scanner for a fresh score.
I wrote this skill. Can I fix the score or have the page removed?: Fix the findings and push. The reports are rebuilt from GitHub on a schedule, so the next run picks the change up. To have the page removed, open an issue on the ProSkills GitHub repo.

Keep reading

Free tool

Scan your own skill

Paste a SKILL.md or drop a folder. It is scored in your browser and nothing is uploaded.

Open the Skill Scanner

Want a skill that already passes? Start with a free one.