The Agent Skills Directory

[COMMAND_EXECUTION]: Utilizes osascript to automate the Find My application's interface, including opening the app, clicking buttons, and switching between device and item tabs.
[EXTERNAL_DOWNLOADS]: Recommends the installation of peekaboo from a personal GitHub Homebrew tap (steipete/tap/peekaboo) to provide more reliable UI automation, creating a dependency on unverified third-party software.
[DATA_EXFILTRATION]: Captures screenshots containing sensitive real-time location data (addresses and maps) and saves them to the /tmp/ directory. While no network exfiltration is detected, these files are accessible to other processes on the system.
[PROMPT_INJECTION]: The skill processes untrusted visual data that could contain indirect instructions. 1. Ingestion points: Data is read from screenshots using the vision_analyze tool as described in SKILL.md. 2. Boundary markers: No explicit delimiters or instructions are used to separate user-controlled UI text from agent commands. 3. Capability inventory: The skill has access to terminal execution and osascript for system interaction. 4. Sanitization: No filtering or validation is performed on the text extracted from the Find My interface before it is processed by the agent.

findmy