apple-reminders
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references the
remindctlutility, which is installed via a third-party Homebrew tap (steipete/tap/remindctl). The skill instructions dictate that the agent must show the installation command to the user and stop execution if the tool is not found, ensuring no automated installation of external code occurs. - [COMMAND_EXECUTION]: The skill utilizes the
Bashtool to perform operations such as listing, adding, and deleting reminders via theremindctlCLI. It includes logic to verify the presence of the CLI and confirm the host operating system is macOS before proceeding. - [INDIRECT_PROMPT_INJECTION]: The skill processes natural language input from the user to populate reminder fields, which introduces a potential vector for indirect prompt injection.
- Ingestion points: User-supplied reminder titles, list names, and time descriptions (SKILL.md).
- Boundary markers: None specified to separate user data from the command execution context.
- Capability inventory: The skill has the ability to execute shell commands via the
Bashtool (SKILL.md). - Sanitization: The instructions mandate that the agent must parse natural language times into a strict
YYYY-MM-DD HH:MMformat before they are used as CLI arguments, providing a layer of validation for time-based inputs.
Audit Metadata