apple-notes

Pass

Audited by Gen Agent Trust Hub on Apr 6, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill installs the memo CLI tool from a third-party Homebrew tap (antoniorodr/memo/memo) and suggests manual installation via pip. These sources are not affiliated with known trusted organizations.
  • [COMMAND_EXECUTION]: The skill executes shell commands using the memo binary to create, view, edit, search, and delete notes within the macOS Apple Notes application.
  • [PROMPT_INJECTION]: The skill is vulnerable to indirect prompt injection as it ingests untrusted data from existing Apple Notes.
  • Ingestion points: Note titles and body content retrieved through memo notes and search commands.
  • Boundary markers: None; the skill does not use delimiters or warnings to separate note content from agent instructions.
  • Capability inventory: The agent has the ability to execute shell commands to modify or delete data and export notes to external files.
  • Sanitization: None; note content is processed without validation or escaping.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 6, 2026, 11:29 PM
Security Audit — agent-trust-hub — apple-notes