apple-notes-prod-checklist
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides guidelines and a local validation script for macOS automation tasks, focusing on system configuration and permission verification.
- [COMMAND_EXECUTION]: The validation script uses
osascriptviaBashto interact with the local Apple Notes application. This is a standard method for macOS automation and is used here specifically to verify that the automation environment is correctly configured. - [DATA_EXPOSURE]: The script retrieves the number of notes in the default account using
Application("Notes").defaultAccount.notes.length. This is a read-only metadata check used to confirm TCC (Transparency, Consent, and Control) permissions are active and does not access or expose the actual content of the notes. - [INDIRECT_PROMPT_INJECTION]: The skill serves as a static checklist and diagnostic tool. It does not ingest untrusted external data from APIs or the web, and it includes instructions for the agent to avoid logging sensitive information, which mitigates injection and exposure risks.
Audit Metadata