Query the macOS quarantine database to understand where files came from.
Inherits all available tools
Additional assets for this skill
This skill inherits all available tools. When active, it can use any tool Claude has access to.
Query the macOS quarantine database to understand where files came from.
Use this skill when users ask about:
| Tool | Description | Destructive |
|---|---|---|
quarantine_recent | Recent downloads | No |
quarantine_search_app | Search by app name | No |
quarantine_search_url | Search by URL pattern | No |
quarantine_by_date | Filter by date range | No |
quarantine_apps | Apps ranked by download count | No |
quarantine_audit_week | Weekly audit summary | No |
quarantine_oldest | Oldest download record | No |
quarantine_clear | Clear history (requires confirm) | YES |
Recent downloads:
quarantine_recent({ limit: 20 })
Find Safari downloads:
quarantine_search_app({ name: "Safari" })
Downloads from GitHub:
quarantine_search_url({ pattern: "github.com" })
Weekly audit:
quarantine_audit_week()
Clear history (DANGEROUS):
quarantine_clear({ confirm: true })
~/Library/Preferences/com.apple.LaunchServices.QuarantineEventsV2