The Agent Skills Directory

[COMMAND_EXECUTION]: The skill utilizes the remindctl binary to interact with the local Reminders application on macOS, executing commands to create, view, and modify task data.
[INDIRECT_PROMPT_INJECTION]: The skill exhibits an attack surface for indirect prompt injection by passing untrusted user data into shell command arguments. * Ingestion points: User-provided strings for task titles, list names, and dates are ingested through the add and list commands in SKILL.md. * Boundary markers: Although the skill documentation uses double quotes for task titles (e.g., remindctl add "Buy milk"), it does not provide explicit instructions for the agent to escape shell metacharacters or subshell invocations. * Capability inventory: The skill has the capability to read all reminders, create new tasks, and delete existing entries, which requires user-granted access to the Reminders database. * Sanitization: The skill instructions do not specify any sanitization, filtering, or validation steps for the user-supplied content before it is executed.
[EXTERNAL_DOWNLOADS]: The skill requires the external installation of the remindctl tool from a third-party Homebrew tap (steipete/tap/remindctl). This is a standard and documented method for acquiring the tool from its developer's repository.

apple-reminders