skills/jeremylongshore/tons-of-skills-marketplace/apple-notes-migration-deep-dive/Gen Agent Trust Hub
apple-notes-migration-deep-dive
Warn
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The script provided for Obsidian to Apple Notes migration performs unsafe string interpolation of shell variables ($title and $body) directly into a JavaScript command executed by osascript. If a note title or body contains single quotes, it could terminate the string literal and allow arbitrary JavaScript execution.\n- [DYNAMIC_EXECUTION]: The migration process relies on the dynamic generation and execution of JavaScript via the macOS scripting bridge (osascript) using unsanitized data sourced from local files at runtime.\n- [INDIRECT_PROMPT_INJECTION]: The skill exhibits vulnerability to indirect injection as it ingests untrusted local data and processes it using powerful capabilities without security boundaries.\n
- Ingestion points: The find command in SKILL.md reads all .md files in the user-defined vault directory.\n
- Boundary markers: None present to distinguish data from instructions during processing.\n
- Capability inventory: Access to Bash (osascript), Write, Edit, and Read tools.\n
- Sanitization: The script performs formatting transformations using sed but lacks escaping for characters that could interfere with the shell or scripting engine.\n- [SAFE]: The skill references documentation from well-known services including Apple Developer, Obsidian, and Notion for guidance on automation and APIs.
Audit Metadata