The Agent Skills Directory

[COMMAND_EXECUTION]: The skill utilizes the kilobat CLI tool to manage system-level firewall rules on macOS. This includes commands like kilobat approve, kilobat block, and kilobat settings to modify network permissions. The skill documentation emphasizes that the user must turn on the network filter in the app and that every change requires explicit user confirmation.
[INDIRECT_PROMPT_INJECTION]: The skill ingests data from the local environment, such as process names, bundle IDs, and connection destinations, via commands like kilobat approvals and kilobat blocked-history. While this data could be influenced by malicious software (e.g., using deceptive process names), the skill includes specific instructions to verify app signatures and user recognition before granting permissions.
Ingestion points: Output from kilobat rules, kilobat approvals, kilobat status, and kilobat blocked-history commands.
Boundary markers: No explicit delimiters are specified in the instructions for separating tool output from prompt context.
Capability inventory: Includes capabilities to approve or deny network connections, modify application-specific rules, and change global firewall settings using the kilobat CLI.
Sanitization: The instructions mandate that the agent check for valid signatures (signatureValid) and verify that the user recognizes the application before performing approvals.

mac-app-firewall