The Agent Skills Directory

[COMMAND_EXECUTION]: The skill executes shell commands using /usr/bin/osascript and /usr/bin/sqlite3. It also utilizes NSTask within JavaScript for Automation (JXA) to execute the SQLite binary with specific flags like -readonly and -safe.
[DATA_EXFILTRATION]: The skill accesses the private macOS calendar database at ~/Library/Group Containers/group.com.apple.calendar/Calendar.sqlitedb. This file contains sensitive user metadata including event summaries, locations, and descriptions. While no external network exfiltration is performed, the skill exposes this private data to the agent's context.
[DYNAMIC_EXECUTION]: The skill dynamically generates JXA scripts by interpolating variables (e.g., CALENDAR_NAME_JSON) into shell heredocs. It also uses ObjC.import to load and execute functionality from macOS system frameworks such as EventKit, MapKit, and Foundation at runtime.
[INDIRECT_PROMPT_INJECTION]:
Ingestion points: Reads potentially untrusted data from calendar event titles, descriptions, and locations via both JXA and SQLite queries in SKILL.md.
Boundary markers: Employs JSON string literals for all variable replacements (e.g., SEARCH_TERM_JSON) to ensure data remains within string boundaries during script execution.
Capability inventory: Includes capabilities to read, create, update, and delete calendar events, as well as the ability to perform airport lookups via MapKit and execute local binaries via NSTask.
Sanitization: Implements regex validation for ISO 8601 timestamps and uses sqlLikeLiteral to escape characters in SQLite search terms.

apple-calendar-jxa