The Agent Skills Directory

[COMMAND_EXECUTION]: The skill instructs the agent to execute various himalaya CLI commands for email management, including listing envelopes and reading messages.
[COMMAND_EXECUTION]: It uses shell commands like pass show or security find-generic-password to retrieve authentication credentials securely from the system's password store.
[EXTERNAL_DOWNLOADS]: The skill metadata defines an installation process using the Homebrew package manager (brew install himalaya) to provide the necessary binary.
[PROMPT_INJECTION]: The skill has an indirect prompt injection surface because it ingests untrusted data from external email servers.
Ingestion points: Email bodies and headers are retrieved via himalaya message read and himalaya envelope list.
Boundary markers: There are no explicit instructions or delimiters used to separate untrusted email content from the agent's instructions during processing.
Capability inventory: The agent has the ability to send emails (himalaya template send), download attachments to local directories (himalaya attachment download), and execute shell commands for credential retrieval.
Sanitization: No sanitization is performed on email content before it is processed or included in reply templates.
[SAFE]: The skill prioritizes secure authentication methods, documenting the use of system keyrings and password managers over raw text storage, and uses well-known installation sources.

himalaya