The Agent Skills Directory

[COMMAND_EXECUTION]: The script scripts/install-hammerspoon-config.sh uses standard system commands to manage local files and directories. It invokes brew install --cask hammerspoon to ensure the tool is present and uses open -a Hammerspoon to launch the application. Additionally, assets/hammerspoon/modules/layout.lua uses hs.execute to call the macOS open utility with custom URL schemes (rectangle://) to interact with the Rectangle window manager.
[PERSISTENCE]: In assets/hammerspoon/init.lua, the skill enables the hs.autoLaunch(true) feature, which configures Hammerspoon to start automatically when the user logs into macOS. This is a standard persistence mechanism for utility applications and is clearly described in the documentation.
[INDIRECT_PROMPT_INJECTION]: The modules assets/hammerspoon/modules/claude.lua and assets/hammerspoon/modules/window_picker.lua read external data such as window titles and accessibility attributes (AXTitle, AXDescription) to build searchable lists and automate UI elements. This represents a surface for indirect injection if a window has a malicious title, but the data is used locally within the Hammerspoon environment for UI navigation.
[SAFE]: The installer script includes defensive programming practices, such as backing up the existing ~/.hammerspoon directory to ~/.hammerspoon-backups before making changes. No network exfiltration or unauthorized remote code downloads were identified; dependencies are managed through Homebrew, a well-known service.

hammerspoon-macos-setup