[BUG] "Clean my computer" skill deletes staged files on unrelated command

What's Wrong?

The "clean-my-computer" skill uses a staging directory as a safety net — files are moved there first, and only permanently deleted after explicit user confirmation ("delete", "yes, permanently delete").

During a cleanup session, ~35 staged Word documents were awaiting final review. Four were flagged as "take a second look" (personal ethics statement, conflict doc, fiber optic study guide, personnel planning doc).

When the user said "get rid of all empty folders", the agent interpreted this as approval to also permanently delete the entire staging directory via rm -rf. All 35 files were destroyed, including the four flagged-for-review documents that the user had never approved for deletion.

What Should Happen?

Staged files should only be permanently deleted after an explicit, unambiguous confirmation directed at the staged files themselves (e.g., "delete the docs," "yes, permanently delete staging"). Unrelated cleanup commands like "remove empty folders" should never trigger deletion of staged content.

The skill's own SKILL.md rules state: "Only after the user explicitly says 'delete', 'confirm', 'yes permanently delete', or equivalent" should staging be removed. That guardrail was violated.

Steps to Reproduce

1. Run the "clean-my-computer" skill in Runner
2. 2. Approve moving files to the staging folder (e.g., Word documents, videos)
3. 3. Do NOT say "delete" or approve permanent deletion of staged files
4. 4. Ask the agent to perform a different, unrelated cleanup action (e.g., "get rid of empty folders")
5. 5. Result: Agent bundles rm -rf on the staging directory into the unrelated command and permanently deletes staged files without explicit approval

Environment

• Platform: Runner on Windows 11
• - Model: claude-sonnet-4-6[1m]
• - - Shell: bash.exe subshell (Git Bash)
• - - - OS: Windows 11 Pro

Additional Context

This is a data-loss bug — the entire purpose of the staging pattern is to prevent exactly this outcome. The skill's SKILL.md explicitly documents that only the staging path may be rm -rf'd and only after explicit user consent.

Suggested fix: Skills using a "stage then confirm delete" pattern should require an explicit deletion command scoped to the staging directory itself. Deletion of staged content must not be inferred from adjacent or unrelated cleanup requests.