The Agent Skills Directory

[COMMAND_EXECUTION]: The skill installs persistence mechanisms to manage background reminder tasks across sessions.
macOS: Installs a LaunchAgent at ~/Library/LaunchAgents/com.local-link.remind-me.plist to monitor tasks every minute.
Windows: Configures a Scheduled Task named 'RemindMe-Skill-Wakeup' that triggers at logon and workstation unlock.
Linux: Sets up a systemd user service (remind-me.service) and timer (remind-me.timer) to process tasks after boot and at regular intervals.
[PROMPT_INJECTION]: Indirect Prompt Injection vulnerability (Category 8) due to unvetted interpolation of user data into system commands.
Ingestion points: User-supplied strings for <提醒标题> (title) and <提醒内容> (message) are passed directly as arguments to creation and handler scripts (e.g., scripts/create_reminder.sh, scripts/wakeup_handler.sh).
Boundary markers: Although arguments are wrapped in double quotes in the shell scripts, there are no internal delimiters or "ignore instructions" markers to prevent the interpreter from processing special characters within the user input.
Capability inventory: The skill possesses the capability to execute AppleScript via osascript, PowerShell commands, and various Linux dialog tools (zenity, kdialog).
Sanitization: The scripts do not implement escaping or validation for user-provided text. A message containing characters such as double quotes followed by AppleScript commands could potentially lead to arbitrary code execution in the context of the script runner.

remind-me