macos-calendar-event-creator
Pass
Audited by Gen Agent Trust Hub on Jun 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill is designed to generate AppleScript code that is intended to be executed on a macOS system via tools like
osascript. This creates a direct execution pipeline from processed text to system-level actions. - [PROMPT_INJECTION]: The skill is vulnerable to indirect prompt injection (Category 8). It accepts natural language input from users and interpolates it into an AppleScript template. The provided sanitization instruction (escaping double quotes) is insufficient to prevent an attacker from using AppleScript syntax to execute arbitrary shell commands via the
do shell scriptcommand. - Ingestion points: Natural language text provided by the user in
SKILL.md. - Boundary markers: None identified to isolate untrusted input within the generated script.
- Capability inventory: Generation of executable AppleScript scripts for local system modification (Category 10).
- Sanitization: Inadequate; the skill only recommends basic double-quote escaping, which does not prevent command injection in AppleScript.
Audit Metadata