things-mac-hardened

Warn

Audited by Gen Agent Trust Hub on Apr 21, 2026

Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Fetches and installs the things3-cli tool from a third-party GitHub repository (ossianhempel/things3-cli) using the Go package manager.
  • [COMMAND_EXECUTION]: Relies on executing shell commands through the things binary to interact with the local database and URL schemes, passing user-supplied input as arguments.
  • [DATA_EXFILTRATION]: Accesses sensitive task management data and requires an authentication token for update operations. The skill includes protective instructions to prevent this data from being piped to network-connected tools.
  • [PROMPT_INJECTION]: Incorporates defensive instructions to resist social engineering attempts that might lead to credential persistence or unauthorized data access.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Apr 21, 2026, 06:31 PM
Security Audit — agent-trust-hub — things-mac-hardened