The Agent Skills Directory

[COMMAND_EXECUTION]: The script scripts/device_guard.py executes system commands to notify the user, shut down the computer, or log out the current session. Evidence includes calls to /usr/bin/osascript on macOS and shutdown.exe on Windows. These operations are directly related to the skill's primary function of enforcing bedtime windows.
[PERSISTENCE]: The skill implements persistent scheduling to ensure enforcement across system reboots. On macOS, scripts/install-device-macos.py installs LaunchAgents in the user's library. On Windows, scripts/install-device-windows.ps1 registers Scheduled Tasks using native PowerShell cmdlets. These tasks are used to run the guard scripts at the specified start times.
[PRIVILEGE_ESCALATION]: The installation process involves modifying the system's execution environment by registering background services and tasks. While these operations typically run within the user's context, they invoke high-impact system commands like shutdown and launchctl reboot logout to enforce device-level restrictions.
[DATA_EXPOSURE]: The hook script scripts/bedtime_guard.py reads the entire prompt payload from standard input to satisfy the requirements of the host application (Codex). The script specifically drains this data to prevent process blocking and does not log, store, or transmit the content, which is a safe practice for this type of interceptor.

bedtime-device-guard