things-setup
Pass
Audited by Gen Agent Trust Hub on May 20, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: Uses the
osascriptcommand to execute AppleScript for interacting with the local Things 3 application. This is a standard automation practice on macOS for inter-application communication. - [EXTERNAL_DOWNLOADS]: Installs the
things3-mcppackage from the NPM registry vianpxto provide the Model Context Protocol server functionality. NPM is a well-known service, and the operation is used to set up the intended bridge to the task manager. - [SAFE]: The skill emphasizes local execution and privacy, specifically stating that no cloud APIs or accounts are used, which is consistent with the observed technical implementation using local AppleScript.
Audit Metadata