The Agent Skills Directory

[PERSISTENCE]: The skill provides a template (templates/device-install.plist) and instructions to install it as a macOS LaunchAgent in ~/Library/LaunchAgents/. This creates a persistent background process (watch_release_install.sh) that runs at every login and monitors the repository for changes to trigger automated builds.- [CREDENTIALS_UNSAFE]: The documentation (SKILL.md) contains a hardcoded Apple Developer Team ID (GU9WTSTX9M). It also instructs users to store sensitive signing credentials, including App Store Connect API keys and paths to private .p8 files, in a local org-credentials.env file. This practice increases the risk of local credential exposure and unintentional inclusion in backups or other files.- [INDIRECT_PROMPT_INJECTION]: The scripts/ci_submit.py script ingests data from a CHANGELOG.md file located in the target repository to generate 'What's New' release notes for App Store Connect. 1. Ingestion points: CHANGELOG.md file read by ci_submit.py. 2. Boundary markers: None; the script extracts text based on regex headers. 3. Capability inventory: The script has capabilities to POST and PATCH data to the App Store Connect API. 4. Sanitization: The script performs minimal cleaning, removing only markdown formatting characters like '*' and '' from the extracted text.- **[DYNAMIC_EXECUTION]:** The scripts/install_on_device.sh script executes an embedded Python script using a heredoc pattern (python3
"$WANT" <<'PY'). It also uses evalto resolve the path for theASC_PRIVATE_KEY_PATH environment variable, which presents a command injection risk if environment variables are manipulated.- **[COMMAND_EXECUTION]:** The skill relies on various shell commands (xcodebuild, security, xcrun`) within its scripts and GitHub Actions templates to perform archiving, signing, and uploading tasks using environment-derived variables.

ios-auto-release