things-mac-hardened
Warn
Audited by Gen Agent Trust Hub on Apr 21, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches and installs the
things3-clitool from a third-party GitHub repository (ossianhempel/things3-cli) using the Go package manager. - [COMMAND_EXECUTION]: Relies on executing shell commands through the
thingsbinary to interact with the local database and URL schemes, passing user-supplied input as arguments. - [DATA_EXFILTRATION]: Accesses sensitive task management data and requires an authentication token for update operations. The skill includes protective instructions to prevent this data from being piped to network-connected tools.
- [PROMPT_INJECTION]: Incorporates defensive instructions to resist social engineering attempts that might lead to credential persistence or unauthorized data access.
Audit Metadata