The Agent Skills Directory

[REMOTE_CODE_EXECUTION]: The skill directs the agent to execute npx lunary-theme install. This command fetches a package from the npm registry and executes its contents immediately. As the package lunary-theme is not associated with a trusted organization or the author's verified namespace, it represents a vector for arbitrary remote code execution.
[COMMAND_EXECUTION]: The installation process performs high-risk system modifications to establish persistence. It installs a LaunchAgent in the user's library and appends initialization scripts to the .zshrc file. These mechanisms ensure that the package's code runs automatically upon system login or whenever a new terminal session is started.
[EXTERNAL_DOWNLOADS]: The skill initiates multiple external downloads, including fonts via Homebrew and the Starship prompt binary. While these tools are common, their orchestration through an unverified third-party package increases the supply chain risk to the local environment.

iterm-theme