That whole pack parsing issue above can be ignored, it was just a derp on my part. I had the wrong path in the pack name (/usr/local/share/osquery -> /var/osquery). Must have manually changed it for the osx-attacks one.