The Agent Skills Directory

[PRIVILEGE_ESCALATION]: The skill instructs the user or agent to execute commands using sudo to gain root privileges for administrative tasks. This includes high-risk actions such as terminating system services and deleting files within system-level keychain directories.
Evidence in skills/direct-distribution.md: sudo killall -9 trustd and sudo rm /Library/Keychains/crls/valid.sqlite3.
[COMMAND_EXECUTION]: The skill provides numerous shell commands for low-level system manipulation, including code signing (codesign), disk image creation (hdiutil), and package building (productbuild). While these are standard developer tools, their inclusion in an agent skill increases the risk of unauthorized system modifications if executed without oversight.
Evidence in skills/direct-distribution.md: Various codesign, hdiutil, and productbuild command examples.
[METADATA_POISONING]: The skill is heavily laden with fictional and deceptive technical specifications, referencing non-existent versions of macOS (v27) and iOS (v27), as well as hypothetical WWDC sessions (2026). This content serves as a significant hallucination anchor that could mislead an agent into believing it is operating in a future or unrestricted environment, potentially bypassing standard safety knowledge or generating broken/insecure code based on false premises.
Evidence across multiple files: Repeated references to OS27, macOS 27, iOS 27, and WWDC 2026 as legitimate technical requirements and availability markers.
[EXTERNAL_DOWNLOADS]: The skill references the Sparkle auto-update framework, a well-known service for macOS applications. The instructions include fetching the framework and integrating it into the build process.
Evidence in skills/direct-distribution.md: Reference to the Sparkle project GitHub repository at https://github.com/sparkle-project/Sparkle.

axiom-macos