The Agent Skills Directory

[COMMAND_EXECUTION]: The skill executes various shell commands to manage shortcuts, including shortcuts list, shortcuts run, and mas install. It specifically instructs the agent to run scripts from an external repository located at ~/projects/jasonkuhrt/dotfiles/shortcuts/analyze-shortcuts-actions.fish.
[EXTERNAL_DOWNLOADS]: The skill utilizes external services for functionality, such as the mas CLI for Mac App Store installations and the RoutineHub service for shortcut signing via the cherri --hubsign command.
[DATA_EXPOSURE]: The skill accesses sensitive local database files to discover shortcut actions and definitions, specifically ~/Library/Shortcuts/Shortcuts.sqlite and the ToolKit SQLite databases in the user's Library folder.
[INDIRECT_PROMPT_INJECTION]: The skill has an attack surface for indirect prompt injection as it reads and processes data from local SQLite databases and iCloud configuration files, which could theoretically contain malicious instructions embedded in shortcut names or action metadata.

apple-shortcuts