The Agent Skills Directory

[COMMAND_EXECUTION]: The skill uses multiple macOS system utilities including osascript, brctl, shortcuts, and log to gather diagnostic state and application metadata.
[DATA_EXPOSURE]: The script accesses ~/Library/Group Containers/group.com.apple.notes/. This directory is the primary storage location for Apple Notes data and includes sensitive SQLite databases. While the script only executes a directory listing (ls -la) to verify file existence and permissions, this path is considered a sensitive application data container.
[DYNAMIC_EXECUTION]: The checkAppleNotesHealth function in the "Automated Health Check" section uses execSync to dynamically execute shell commands and JXA (JavaScript for Automation) scripts to verify the application state.
[INDIRECT_PROMPT_INJECTION]: The skill has an indirect prompt injection surface as it ingests untrusted data from various system command outputs.
Ingestion points: Output from system commands like sw_vers, pgrep, osascript, shortcuts, brctl, log, and ls is captured and stored in text files.
Boundary markers: No specific delimiters or "ignore embedded instructions" warnings are applied to the captured command outputs.
Capability inventory: The skill utilizes Bash, Read, Write, and Edit tools to execute commands and manipulate the filesystem.
Sanitization: The script does not perform sanitization or validation of the tool outputs before bundling them into the final archive.

apple-notes-debug-bundle