Apple Shortcuts Integration
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data, creating a surface for indirect prompt injection.\n
- Ingestion points: Variable placeholders in
SKILL.mdsuch as{{text_to_process}},{{task}},{{details}},{{notes}}, and{{event_title}}ingest data from user input or external sources.\n - Boundary markers: There are no explicit delimiters or instructions provided to differentiate between data and instructions during interpolation.\n
- Capability inventory: The skill utilizes
shortcuts_run,reminders_create, andnotes_createtools via theapple-mcpserver, allowing for system actions and data modification.\n - Sanitization: No sanitization or validation of external content is specified before it is processed by the agent.
Audit Metadata