The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill installs an external dependency from a third-party repository (github.com/ossianhempel/things3-cli) using the go install command during the setup phase.
[COMMAND_EXECUTION]: The skill relies on executing a binary named things to interact with the local filesystem and the Things 3 application. It passes user-provided or database-sourced strings (titles, notes) directly to this CLI tool.
[DATA_EXFILTRATION]: The instructions explicitly request the user to grant "Full Disk Access" to the calling application (e.g., the agent or terminal). This permission allows the skill's dependencies to read the entire local Things database, which contains personal task information and notes.
[INDIRECT_PROMPT_INJECTION]: The skill reads todo titles, notes, and project names from the local database. These fields can contain arbitrary text that may act as instructions to the agent when it summarizes or processes the retrieved data.
Ingestion points: Data enters the context through commands like things inbox, things today, and things search (found in SKILL.md).
Boundary markers: None identified; retrieved data is presented directly to the agent context.
Capability inventory: The agent can execute shell commands through the things CLI and initiate URL schemes to modify application state (found in SKILL.md).
Sanitization: No sanitization or escaping of the retrieved database content is specified.

things-mac