The Agent Skills Directory

[COMMAND_EXECUTION]: The skill makes extensive use of subprocess.run to call system utilities including osascript, pdftoppm, pdfinfo, textutil, and the macOS open command. These tools are used to extract text from documents, generate image previews for PDFs, and interact with the Apple Calendar service.
[DATA_EXFILTRATION]: The server script reads the user's local Apple Calendar SQLite database located at ~/Library/Group Containers/group.com.apple.calendar/Calendar.sqlitedb. While intended to display calendar events in the dashboard, this involves accessing highly sensitive personal data from a protected system directory.
[INDIRECT_PROMPT_INJECTION]: The skill has a significant attack surface for indirect injection as it parses data from project files such as case.yaml, JOURNAL.md, and TASKS.md. These files are treated as data sources, and their content (such as task IDs or file paths) is subsequently used in logic that triggers system-level CLI calls.
[PRIVILEGE_ESCALATION]: The dashboard interface includes a specific function and UI element to guide users to grant 'Full Disk Access' (FDA) to the ZCode environment via a system preference URL. This is used to bypass standard sandbox restrictions to read the Calendar database directly via SQLite.

case-dashboard