The Agent Skills Directory

[COMMAND_EXECUTION]: The skill instructs the agent to use standard macOS system utilities (codesign, spctl, and plutil) to inspect binary metadata. This is standard behavior for a diagnostic tool.
[INDIRECT_PROMPT_INJECTION]: The skill processes data from untrusted external sources (binaries and source files) to extract entitlements, which represents a potential injection surface.
Ingestion points: Binary and source files referenced in SKILL.md.
Boundary markers: None provided in the instructions.
Capability inventory: Includes codesign, spctl, and plutil for read-only inspection.
Sanitization: No explicit sanitization or escaping of file content is described.

signing-entitlements