The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill instructions direct the user to install the imsg CLI from an external third-party Homebrew tap (steipete/tap/imsg). This introduces a dependency on code hosted and maintained outside of the primary platform.
[INDIRECT_PROMPT_INJECTION]: The skill processes untrusted incoming data from iMessages which could contain malicious instructions.
Ingestion points: Message content retrieved via imsg history and imsg list commands in SKILL.md.
Boundary markers: Absent; there are no explicit delimiters or instructions to ignore embedded commands within the message text.
Capability inventory: The skill has access to Bash, Read, and Write tools as defined in the frontmatter of SKILL.md.
Sanitization: Absent; the skill does not specify any filtering or sanitization of message content before it is processed by the agent.
[COMMAND_EXECUTION]: The skill relies on executing shell commands to interact with the local macOS Messages database. While these commands are specific to the imsg utility, the use of the Bash tool provides the underlying capability for local command execution.

imessage