apple-notes-rate-limits
Warn
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: MEDIUMDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [DYNAMIC_EXECUTION]: The bash script example dynamically generates JavaScript code for osascript by interpolating shell variables ($title, $body) directly into a string. This creates a risk of command injection if the input data contains single quotes or malicious code snippets, as it can break out of the string literal and execute arbitrary logic within the osascript environment.
- [INDIRECT_PROMPT_INJECTION]:
- Ingestion points: The bash script reads from a user-provided JSON file via jq (found in SKILL.md).
- Boundary markers: None present to distinguish instructions from data.
- Capability inventory: Uses osascript (via Bash tool) to interact with the local Apple Notes application and database.
- Sanitization: No validation or escaping is performed on the title or body fields before they are interpolated into the execution string.
- [COMMAND_EXECUTION]: The skill uses the osascript tool to perform operations on the local system. While intended for Apple Notes management, the lack of input sanitization in the provided examples allows these commands to be manipulated by malicious input data.
Audit Metadata