The Agent Skills Directory

[COMMAND_EXECUTION]: The skill relies on utilities like osascript, JXA, and Shortcuts to execute arbitrary scripts on the host system. It explicitly suggests using sudo for elevated script execution and mentions using the tccutil CLI to manipulate system Privacy and Security (TCC) settings, which can lead to unauthorized permission changes.- [PROMPT_INJECTION]: The skill exhibits a vulnerability to indirect prompt injection. 1. Ingestion points: Data is ingested via the shortcuts run command using the -i flag for JSON input. 2. Boundary markers: No protective boundary markers or instructions to ignore embedded commands are implemented. 3. Capability inventory: The skill has high-impact capabilities including osascript execution and sudo access. 4. Sanitization: No input validation or sanitization is described before data is passed to system commands.- [EXTERNAL_DOWNLOADS]: The skill suggests installing the osa package from the NPM registry to enable AppleScript integration within Node.js environments.

macos-automation