The Agent Skills Directory

[PERSISTENCE]: The skill creates a Windows Scheduled Task using schtasks /Create. This establishes a persistent presence on the host system, ensuring the reminder script executes daily at a specific time regardless of system reboots.
[PRIVILEGE_ESCALATION]: The skill explicitly requires administrative privileges to register and remove system-level tasks. It further bypasses security controls by using the -ExecutionPolicy Bypass flag when setting up the task, which circumvents local PowerShell execution restrictions.
[COMMAND_EXECUTION]: Both setup_reminder.ps1 and remove_reminder.ps1 utilize Invoke-Expression to execute shell commands constructed from strings. This pattern is inherently dangerous as it could lead to command injection if input parameters such as the task name or execution time are influenced by untrusted data.
[TIME_DELAYED_CONDITIONAL]: The skill's primary function is time-gated, triggering the execution of browser-opening commands and system notifications specifically at 17:30 (or a custom defined time) each day.
[INDIRECT_PROMPT_INJECTION]: The skill exposes an attack surface for processing untrusted data.
Ingestion points: The daily_reminder.ps1 script accepts $Url, $Title, and $Message as input parameters from the agent.
Boundary markers: There are no delimiters or warnings to prevent the agent from treating embedded instructions within these parameters as commands.
Capability inventory: The script has the capability to open arbitrary URLs via Start-Process and display system-level notifications.
Sanitization: No sanitization or validation is performed on the input parameters before they are passed to system commands.

oa-daily-report