The Agent Skills Directory

[SAFE]: The skill uses the official iTerm2 Python API and the PyObjC library to interact with the terminal and the macOS Quartz framework for window management.
[COMMAND_EXECUTION]: The skill uses subprocess.run to execute the system screencapture utility. This is used exclusively for taking screenshots of terminal windows for verification purposes and uses structured arguments rather than a raw shell string.
[DATA_EXPOSURE]: The skill includes an example (examples/06-environment-vars.py) that propagates common environment variables (like AWS_PROFILE or KUBECONFIG) to newly created terminal tabs. This is documented functionality to ensure that CLI tools inside the automated session have the correct user context and does not involve exfiltration to external sources.
[OBFUSCATION]: Base64 encoding is used in examples/08-badge-control.py, but this is the standard, documented format required by iTerm2's escape sequences to set session badges and is not used to hide malicious code.
[INDIRECT_PROMPT_INJECTION]: The skill reads terminal screen contents via async_get_screen_contents(), which represents an attack surface for indirect prompt injection if a TUI prints malicious instructions. However, the skill implements defensive patterns such as unique verification markers and the use of shlex.quote for argument escaping.

iterm2-driver