The Agent Skills Directory

[COMMAND_EXECUTION]: The skill executes sudo -n sqlite3 to query the system-wide TCC database and tccutil reset to modify permission states. The -n flag in sudo indicates non-interactive mode, which may attempt to use cached credentials to bypass user password prompts.
[PRIVILEGE_ESCALATION]: The skill provides instructions to grant 'Full Disk Access' (FDA) to various binaries, such as terminal emulators and the uv package manager. FDA is a high-level permission that allows a process to bypass most privacy protections on macOS.
[DATA_EXFILTRATION]: The skill reads from TCC.db (both user and system levels). This database contains a sensitive record of all privacy-related permissions (Camera, Microphone, Screen Recording, etc.) granted or denied to every application on the system.
[INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted system data through system commands. * Ingestion points: System logs via log show in SKILL.md and database records via sqlite3 in tcc-mechanics.md. * Boundary markers: None present. * Capability inventory: Read-only access to system logs and the TCC database; no network or file-write capabilities are present in the skill scripts. * Sanitization: No sanitization of ingested log or database content is performed before processing.

macos-permissions