The Agent Skills Directory

[COMMAND_EXECUTION]: The script uses child_process.spawn to execute the afplay utility, which is a standard macOS command for playing audio files. This is used strictly for audible notifications with a hardcoded system path, posing no risk of arbitrary command injection.
[INDIRECT_PROMPT_INJECTION]: The skill accepts a user-defined 'label' which is printed back to the console and subsequently seen by the agent in a system message. This constitutes a potential indirect injection surface.
Ingestion points: The label parameter in timer.js (collected via process.argv).
Boundary markers: The system notification clearly delimits the label within a formatted message (⏰ Timer complete! [label]).
Capability inventory: The script is limited to standard output and spawning the afplay audio utility; it lacks network access or file system write capabilities.
Sanitization: No explicit sanitization is performed on the label string, but the limited capabilities of the skill mitigate the risk of exploitation.

timer