The Agent Skills Directory

[PRIVILEGE_ESCALATION]: The skill instructs the agent to execute sudo tmutil thinlocalsnapshots to reclaim space from local snapshots. This is a high-privilege operation that requires administrative permissions.
[EXTERNAL_DOWNLOADS]: The documentation in references/third-party-tools.md recommends installing third-party utilities (dust, dua, gdu, diskonaut) from GitHub repositories using the mise tool manager and aqua registry.
[INDIRECT_PROMPT_INJECTION]: The scripts/scan-suspects.sh script is vulnerable to command injection via malicious filenames. 1. Ingestion points: File paths are ingested from the local filesystem using find and du. 2. Boundary markers: Absent; file paths are interpolated directly into command strings. 3. Capability inventory: The generated command strings are intended to be executed using the agent's Bash tool. 4. Sanitization: No escaping or sanitization is performed on file paths before they are inserted into command templates (e.g., rm -rf {dir}), allowing for arbitrary command execution if a directory name contains shell metacharacters like backticks or subshells.
[COMMAND_EXECUTION]: The skill facilitates the execution of various destructive shell commands such as rm -rf and docker system prune based on an internal catalog of suspected disk consumers.

macos-disk-usage