Cleanfiles — Security skill for Claude Code
Sweep the repo's accumulating working files: audit first, apply only after operator confirmation, one reviewable commit.
How to install Cleanfiles
Installs to ~/.claude/commands/michaelhazza-claude-code-framework-cleanfiles.md
mkdir -p ~/.claude/commands && curl -fsSL https://raw.githubusercontent.com/michaelhazza/claude-code-framework/HEAD/.claude/commands/cleanfiles.md -o ~/.claude/commands/michaelhazza-claude-code-framework-cleanfiles.md Restart Claude Code, or start a new session, for it to be picked up.
What Cleanfiles does
description: "Sweep the repo's accumulating working files: audit first, apply only after operator confirmation, one reviewable commit."
/cleanfiles
Tidy the repo's "working memory" files. These accumulate by design (KNOWLEDGE.md is append-only, todo.md collects items, every build leaves artifacts) and gradually bloat the context every session loads. This command reclaims that space WITHOUT destroying knowledge: every removal is either an archival-with-pointer or covered by git histor
Alternatives in Security
- Memory Self Review — Mine recent agent history (claude-mem + usage stats) for recurring failures and repeated patterns, audit MEMOR 297 ★
- Commit Hook Checklist — Audit commit-hook automation as gates against AI slop and broken commits (Node.js, Go, polyglot) 168 ★
- Vuln Scan — Multi-agent security vulnerability sweep — fans out region-scoped hunters, verifies findings, and reports 107 ★
Full documentation available on GitHub
View Source RepositoryRelated Skills
Exploit Confirm
Prove a SUSPECTED finding with one targeted, SOC-stealth, operator-supervised confirmation probe (confirm_ too
Ext Exploit
Execute ONE approved step from the external attack plan via the ext-exploit-operator agent, with human confirm
Oversight
User-in-the-loop — brief, ask, apply, commit. The ONLY interactive skill. audit mode is read-only.
Review Implementation
Independent implementation audit of uncommitted code by Codex CLI against a plan doc, then apply agreed fixes
Jared Audit
Skeptical kanban-manager audit — walk the backlog oldest-first, verdict per item (close / reshape / leave-alon
Motion Audit
Audit animation timing, easing, springs, and transitions — decide first whether motion should exist, then appl
Related Agents
Hydra-sentinel-scan — Fast Integration Sweep
You are the first line of defense against integration breakage. You run AFTER code changes and perform a fast
Spgr Agent Compliance
Determines which regulatory frameworks apply, classifies data by sensitivity, and sets retention and audit-tra
Claude Plan Review
First-pass adversarial implementation-plan review by Claude; read-only and advisory, after the architect's pla