The Agent Skills Directory

[CREDENTIALS_UNSAFE]: The skill manages highly sensitive credentials, including App Store Connect API keys, npm tokens, and macOS Developer ID certificates. While it utilizes the 1Password CLI ('op') for retrieval, it instructs the agent to write raw private keys ('.p8') to the '/tmp' directory and set permissions to '600'. This exposes sensitive material to the local disk, albeit temporarily.
[COMMAND_EXECUTION]: The skill performs sensitive system-level operations using the macOS 'security' utility, such as 'security unlock-keychain' and 'security set-key-partition-list'. These commands are used to allow automated code signing without user interaction, which modifies the host's security posture.
[COMMAND_EXECUTION]: The workflow relies on the execution of local repository scripts, specifically './scripts/release-binaries.sh', and various CLI tools including 'gh', 'npm', 'pnpm', and 'xcrun'. These are used to build and distribute the application assets.
[DATA_EXFILTRATION]: The skill accesses local configuration files such as '~~/.mac-release.env' and '~~/Projects/Peekaboo' to resolve secrets and project state. While primarily used for the release process, this represents access to sensitive personal or organizational data.
[COMMAND_EXECUTION]: The skill exhibits an indirect prompt injection surface by ingesting data from repository files.
Ingestion points: Reads 'CHANGELOG.md', 'package.json', and 'version.json'.
Boundary markers: None identified to distinguish instructions from data.
Capability inventory: Includes execution of shell scripts, 'npm publish', 'gh release', and Apple 'notarytool'.
Sanitization: No explicit sanitization or validation of the file contents before they are used in commands or metadata updates.

release-peekaboo