apple-notes
Pass
Audited by Gen Agent Trust Hub on Apr 6, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the
memoCLI tool from a third-party Homebrew tap (antoniorodr/memo/memo) and suggests manual installation via pip. These sources are not affiliated with known trusted organizations. - [COMMAND_EXECUTION]: The skill executes shell commands using the
memobinary to create, view, edit, search, and delete notes within the macOS Apple Notes application. - [PROMPT_INJECTION]: The skill is vulnerable to indirect prompt injection as it ingests untrusted data from existing Apple Notes.
- Ingestion points: Note titles and body content retrieved through
memo notesand search commands. - Boundary markers: None; the skill does not use delimiters or warnings to separate note content from agent instructions.
- Capability inventory: The agent has the ability to execute shell commands to modify or delete data and export notes to external files.
- Sanitization: None; note content is processed without validation or escaping.
Audit Metadata