apple-notes-enterprise-rbac
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides documentation and implementation templates for hardening Apple Notes automations. It promotes security best practices such as least privilege, default-deny policies, and audit logging.\n- [COMMAND_EXECUTION]: The skill utilizes the
profilesandosascriptcommands. These are standard and appropriate utilities for querying macOS MDM status and automating Apple Notes in a managed environment.\n- [INDIRECT_PROMPT_INJECTION]: The skill contains logic that reads folder names from the local system (f.name()). While this represents a data ingestion surface, the snippets use the data for permission checks rather than interpolating it into prompts.\n - Ingestion points: Folder and account names retrieved via JXA in
SKILL.md.\n - Boundary markers: None present in the logic snippets.\n
- Capability inventory:
Bash(osascript:*),Read,Write,Edit.\n - Sanitization: Logic employs basic string matching and explicit allowlisting for permissions.
Audit Metadata