apple-notes
Warn
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of a third-party CLI tool
memofrom a Homebrew tap (antoniorodr/memo/memo) that is not associated with a trusted vendor. It also suggests a manual installation method usingpip install .. \n- [COMMAND_EXECUTION]: The skill relies on executing various shell commands through thememobinary to manage macOS Apple Notes, including creating, editing, and deleting entries. \n- [INDIRECT_PROMPT_INJECTION]: \n - Ingestion points: Reads existing Apple Notes content and processes search queries provided by the user. \n
- Boundary markers: None identified; the skill does not specify delimiters to separate note content from instructions. \n
- Capability inventory: Includes shell command execution through the
memotool and file system writes during note exports to HTML or Markdown. \n - Sanitization: No explicit sanitization or validation of external note content is mentioned before it is processed by the agent or CLI tool.
Audit Metadata