apple-smart-schedule
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local bash scripts (
create_event.sh,create_reminder.sh, etc.) which utilizeosascriptto interact with macOS native Calendar and Reminders applications. It also usespython3for precise date and time parsing to ensure cross-locale compatibility. - [EXTERNAL_DOWNLOADS]: The documentation mentions an optional dependency,
remindctl, which can be installed via Homebrew (brew install steipete/tap/remindctl). This is a manual recommendation for users to enhance reminder management and is not performed automatically by the skill scripts. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to process untrusted user input from text messages and screenshots. To mitigate risks, the shell scripts implement a sanitization function (
esc) that escapes double quotes usingsedbefore the data is interpolated into AppleScript string literals, preventing basic breakout attempts. - [DATA_EXFILTRATION]: While the skill interacts with personal calendar and reminder data, it operates locally on the macOS system. The instructions explicitly advise the AI agent to omit sensitive information such as ticket numbers or order IDs from the generated events to maintain user privacy.
Audit Metadata