Omahub
← All plugins
S

Omarchy Cleaner

by Sean GILES

Safe, review-first system cleanup

GitHub

Security review

Review recommended · 4 findings

Deterministic scan — not a security guarantee

Medium
Risk level
Medium
Analyzed commit
2204fce
Scanned
1 month ago
  • medium sudo scripts/safe-clean.sh:37

    Command runs with sudo, elevating the process beyond the plugin environment.

    sudo systemd-tmpfiles --clean || printf 'Temporary-file cleanup failed.\n' >&2
  • medium sudo scripts/safe-clean.sh:40

    Command runs with sudo, elevating the process beyond the plugin environment.

    sudo journalctl --vacuum-time=4weeks || printf 'Journal cleanup failed.\n' >&2
  • medium sudo scripts/deep-clean.sh:42

    Command runs with sudo, elevating the process beyond the plugin environment.

    sudo pacman -Rns "${orphans[@]}"
  • medium sudo scripts/deep-clean.sh:52

    Command runs with sudo, elevating the process beyond the plugin environment.

    sudo find /var/lib/systemd/coredump -xdev -type f -delete

Automated analysis only — not a security guarantee.

AI advisory review

No obvious issues detected

Language-model assessment · ~deepseek/deepseek-v4-flash-latest — advisory only

Low
AI risk level
Low
Recommendation
install
Model
~deepseek/deepseek-v4-flash-latest
Analyzed commit
2204fce
Reviewed
1 month ago

This is a transparent, well-documented system cleanup tool. The sudo findings from the deterministic scan are expected and legitimate for a system cleaner (journal vacuuming, tmpfiles cleanup, orphan removal), and all destructive operations require explicit user confirmation. No obfuscation, network exfiltration, hidden persistence, or credential theft was found in the reviewed code.

  • Uses sudo for system-level cleanup operations, but this is inherent to the plugin's purpose and is clearly disclosed in the README; prompts appear in the user's terminal.
  • Deep Clean can remove orphaned packages and coredumps, but it lists them and requires explicit confirmation before removal.
  • Clipboard history cleanup resets the history file, but this is opt-in and clearly described.
How this check works

This review combines the deterministic scan (the rule-based results above) with an independent look at the plugin's code by a language model. The model reads a trimmed sample of the repository's files, the manifest, and the README, then gives a plain-language risk level and a recommendation: install (no notable danger), review (look closer first), or avoid (clearly dangerous).

It runs on the same analyzed commit as the deterministic scan and is strictly advisory — it is not a security guarantee and never blocks a plugin by itself. A human moderator still reviews plugins before they are listed.

AI advisory only — automated analysis, not a security guarantee.

Install
$ omarchy plugin add https://github.com/SeanGSR/omarchy-cleaner-plugin --enable
System #bar #quickshell #system

Omarchy Cleaner

A theme-aware Omarchy Quattro bar widget for scanning and safely reclaiming disk space. Cleanup is conservative by default, review-first when it can remove packages or caches, and always visible in an interactive terminal.

Omarchy License

Features

  • Live estimates for trash, thumbnails, the Pacman cache, journal usage, orphan packages, and archived crash dumps
  • Safe Clean for desktop trash, generated thumbnails, systemd temporary files, journal entries older than four weeks, and superseded Pacman packages
  • Deep Clean with separate reviews for orphan packages, crash dumps, unused Flatpak runtimes, Docker cache, and developer caches
  • Opt-in clipboard-history cleanup, including cached clipboard images
  • Interactive confirmation before cleanup
  • Visible sudo prompts in the user's terminal
  • No deletion of Docker volumes, downloads, projects, personal files, or user configuration

Requirements

  • Omarchy 4.0 or newer with the Quattro shell plugin system
  • Bash
  • Standard Omarchy/Arch tools used by the selected cleanup categories
  • Optional: Flatpak, Docker, npm, pnpm, pip, Go, and cargo-cache; categories for unavailable tools are safely skipped

The plugin does not download or execute remote code. System cleanup commands run locally and request privilege through interactive sudo only when needed.

Install

omarchy plugin add https://github.com/SeanGSR/omarchy-cleaner-plugin.git --enable

After installation, place the widget wherever you prefer using Omarchy's bar settings, or run:

omarchy bar move io.github.seangsr.omarchy-cleaner --section right

Click the broom icon in the bar to scan and open the cleanup panel.

Optional clipboard add-on

Install Omarchy Clipboard Cleaner to add a visible Clear button—with the same broom icon—to Omarchy's clipboard page:

omarchy plugin add https://github.com/SeanGSR/omarchy-clipboard-cleaner.git --enable

The add-on is installed manually and maintained in its own repository because the Omarchy marketplace requires one plugin per repository. It replaces the built-in clipboard overlay through Omarchy's supported clone routing and keeps the normal clipboard shortcut working.

Update

omarchy plugin update io.github.seangsr.omarchy-cleaner

Remove

omarchy plugin remove io.github.seangsr.omarchy-cleaner

Removal deletes the installed plugin files and its bar entry. It does not run cleanup or remove user data.

Cleanup boundaries

Safe Clean

Safe Clean asks once, then:

  1. Empties the current user's desktop trash.
  2. Deletes generated thumbnail previews under the user's cache directory.
  3. Applies the system's configured systemd-tmpfiles retention rules.
  4. Vacuums journal entries older than four weeks.
  5. Uses Omarchy's package-cache helper, which retains two package versions.

Deep Clean

Deep Clean requires a separate confirmation for every selected category. Orphan package names are shown before removal. Docker cleanup is restricted to stopped containers, dangling images, and builder cache; volumes are excluded. Clipboard cleanup atomically resets Omarchy's history file and removes only the image previews owned by that history. It does not alter the clipboard's currently selected content.

Security and limitations

Omarchy plugins execute as unsandboxed user code. Review the scripts before installation. Cleanup is inherently destructive after confirmation, and this project cannot guarantee that an orphaned package or cache has no value to a particular workflow. Maintain backups and read every review shown in the terminal.

Development

Validate the plugin with:

omarchy plugin validate .
bash -n scripts/*.sh
./scripts/scan.sh

License

MIT