skills/davekilleen/dex/things-setup/Gen Agent Trust Hub

things-setup

Pass

Audited by Gen Agent Trust Hub on May 20, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: Uses the osascript command to execute AppleScript for interacting with the local Things 3 application. This is a standard automation practice on macOS for inter-application communication.
  • [EXTERNAL_DOWNLOADS]: Installs the things3-mcp package from the NPM registry via npx to provide the Model Context Protocol server functionality. NPM is a well-known service, and the operation is used to set up the intended bridge to the task manager.
  • [SAFE]: The skill emphasizes local execution and privacy, specifically stating that no cloud APIs or accounts are used, which is consistent with the observed technical implementation using local AppleScript.
Audit Metadata
Risk Level
SAFE
Analyzed
May 20, 2026, 12:41 AM
Security Audit — agent-trust-hub — things-setup