The Agent Skills Directory

[COMMAND_EXECUTION]: The macOS scheduling utility (scripts/install_launchd_plist.py) uses subprocess.run to call /bin/launchctl. This is used to manage the background monitoring job state (bootstrap, enable, kickstart, and cleanup of legacy labels).
[PERSISTENCE]: The skill provides an optional mechanism to install a macOS launchd plist in ~/Library/LaunchAgents/ to ensure the integrity checks run on a configured interval. This persistence is user-initiated and documented for security monitoring.
[EXTERNAL_DOWNLOADS]: The documentation (SKILL.md) includes a shell script for manual verification of release artifacts. The script downloads checksums, signatures, and public keys from the official GitHub repository of the vendor (prompt-security).
[INDIRECT_PROMPT_INJECTION]: The main logic in scripts/soul_guardian.py ingests the content of workspace files to detect modifications. While this processes external data, the skill treats the content as raw text for hashing and diffing, rather than executable instructions. The results are logged in a tamper-evident audit trail for operator review.

soul-guardian