The Agent Skills Directory

[PROMPT_INJECTION]: The skill instructions expose an indirect prompt injection surface by facilitating the ingestion of untrusted data from user calendars and reminders.
Ingestion points: fetchEvents and fetchReminders in SKILL.md; fetchThisWeekEvents and fetchCompletedReminders in references/eventkit-patterns.md.
Boundary markers: Absent. No delimiters or warnings to ignore embedded instructions are provided when processing event or reminder text.
Capability inventory: The skill enables modification of the user's EKEventStore, including adding and removing events and reminders using the save and remove methods.
Sanitization: Absent. The provided patterns do not describe any validation, escaping, or filtering of data retrieved from EventKit fields such as titles or notes.

eventkit