apple-notes

SUSPICIOUS: the skill’s note-management purpose is plausible, but its actual trust model is weak. It relies on an unverified `note` CLI, forwards sensitive sync credentials and note data to a configurable remote endpoint, and references an on-demand fetch script for backend code. The capability set mostly fits the purpose, but install provenance and data-flow integrity are not sufficiently verifiable.