The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill instructs the agent to download and install a third-party CLI tool (rem) directly from a personal GitHub repository using go install github.com/BRO3886/rem/cmd/rem@latest.
[REMOTE_CODE_EXECUTION]: Executing a remote installation command (go install) from an unverified source at runtime allows for the execution of arbitrary code if the repository or build process is compromised.
[COMMAND_EXECUTION]: The skill performs various shell operations to interact with the macOS environment, including executing the rem tool for reminder management and the date command for temporal calculations.
[PROMPT_INJECTION]: There is a surface for indirect prompt injection because the agent processes data (titles, notes, and list names) retrieved from the user's Reminders app.
Ingestion points: Data retrieved from the system via rem search, rem list, and rem show commands.
Boundary markers: Absent. The instructions do not specify any delimiters or warnings to ignore commands embedded within the reminder text.
Capability inventory: The skill can execute shell commands, manage files (reminders), and potentially perform network operations if instructed by malicious data.
Sanitization: Absent. The skill reads and acts upon the retrieved reminder content without validation or filtering.

reminders