The Agent Skills Directory

[COMMAND_EXECUTION]: The skill performs shell-based installations, binary builds (Swift), and service management commands to build the MacDevBridge application and set up native messaging hosts for Chrome.\n- [EXTERNAL_DOWNLOADS]: Downloads project source code from a specific repository (github.com/alexanderradahl/mac-developer-bridge) and installs standard utilities (cloudflared, nats-server) through the Homebrew package manager.\n- [PERSISTENCE]: Establishes long-running background services using PM2 and installs a macOS application that can be configured for login startup.\n- [CREDENTIALS_UNSAFE]: The skill manages a bridge access token with a mechanism to copy it from a restricted-permission file (0600) directly to the system clipboard, instructing the agent to avoid printing or narrating the secret to protect against exposure.\n- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external tool outputs such as bridge status. Evidence chain: (1) Ingestion: bridge_status and event tools are read into context in agents/setup-agent.md; (2) Boundary markers: Absent; (3) Capabilities: bash, file writing to registry, network (git/brew); (4) Sanitization: Absent. However, the risk is mitigated by strict verification protocols requiring valid tool results rather than prose descriptions.

devmacbridge