macos-osascript

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). 该技能的运行路径涉及通过 Mail AppleScript 读取收件箱消息内容（content of message 1 of inbox 等），其中邮件正文由外部发送者/用户在运行时可提供任意自由文本，可能触发间接提示注入。

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill explicitly instructs using elevated privileges (e.g., "do shell script 'sudo command' with administrator privileges") and includes many shell commands that can modify system state (tmutil restore, hdiutil attach/detach, networksetup, csrutil, etc.), which encourages the agent to perform privileged or system-modifying actions.