The Agent Skills Directory

[COMMAND_EXECUTION]: The skill uses osascript to perform UI automation by controlling the Find My application and screencapture to take screenshots of device locations. These commands interact directly with the operating system's user interface and sensitive data streams.
[PERSISTENCE]: The documentation suggests the use of cron jobs to periodically execute tracking workflows. This pattern involves establishing a scheduled execution mechanism to maintain activity across system sessions.
[INDIRECT_PROMPT_INJECTION]: The skill processes untrusted visual data that could contain malicious instructions.
Ingestion points: Data is ingested by capturing screenshots of the Find My UI (e.g., /tmp/findmy.png), which are then processed by the vision_analyze tool.
Boundary markers: The instructions lack delimiters or constraints to prevent the vision model from interpreting labels, device names, or item names as actionable instructions.
Capability inventory: The skill utilizes osascript (UI control), screencapture (file creation), and suggests cron (task scheduling).
Sanitization: There is no evidence of filtering or sanitizing the text output from the vision analysis before it is incorporated into the agent's context, which could allow an attacker-controlled device name to influence agent behavior.
[EXTERNAL_DOWNLOADS]: Recommends the installation of the peekaboo utility from the steipete/tap/peekaboo Homebrew tap. This resource is provided by a well-known developer and is used for UI automation.

findmy