The Agent Skills Directory

[COMMAND_EXECUTION]: The skill provides scripts in Swift, Python, and Bash that execute shell commands such as open (to trigger URL schemes), defaults write (to modify configuration), and tccutil (to manage permissions). These operations are restricted to the management and automation of the Rectangle application.
[PRIVILEGE_ESCALATION]: Documentation includes instructions for using tccutil reset Accessibility com.knollsoft.Rectangle. While this modifies system security settings, it is a localized reset for the specific application to remediate permission issues and does not represent a general privilege escalation exploit.
[DATA_EXPOSURE]: The included Python script reads the com.knollsoft.Rectangle.plist preference file. This file contains layout and shortcut configurations and does not typically include sensitive user credentials or private data.
[INDIRECT_PROMPT_INJECTION]: The skill interacts with the macOS environment by querying active application names (e.g., via NSWorkspace). While this introduces a surface for untrusted data ingestion, the capabilities are limited to window geometry manipulation, presenting a negligible security risk.

rectangle