The Agent Skills Directory

[COMMAND_EXECUTION]: The skill makes extensive use of osascript (AppleScript) to control the 'FindMy' application and simulate UI interactions like clicking buttons. It also uses the native screencapture utility to take screenshots of the user's desktop, which requires explicit Screen Recording permissions.
[EXTERNAL_DOWNLOADS]: The documentation suggests the installation of an external third-party tool called peekaboo via Homebrew (brew install steipete/tap/peekaboo) for enhanced UI automation. While not a direct execution of remote code, it encourages the user to install external binary dependencies.
[INDIRECT_PROMPT_INJECTION]: The skill creates an attack surface by using vision_analyze on screenshots of the Find My application.
Ingestion points: Screenshots saved to /tmp/findmy.png are processed by an LLM via the vision tool (SKILL.md).
Boundary markers: None identified; the skill directly passes the image to the vision model.
Capability inventory: Uses osascript for UI control and screencapture for file writes (SKILL.md).
Sanitization: None; the skill relies on the vision model to interpret raw image data which could potentially contain adversarial text if an item name or location name was maliciously set.
[DATA_EXPOSURE]: The skill is designed to extract highly sensitive location data (GPS coordinates and addresses) from Apple's Find My network and save these as images in the /tmp directory. While this is the primary purpose of the skill, it involves handling sensitive personal information.

findmy