The Agent Skills Directory

[COMMAND_EXECUTION]: The skill utilizes osascript to run JavaScript for Automation (JXA) for querying the Apple Notes database. It also suggests using fswatch for real-time monitoring of the NoteStore.sqlite file.
[INDIRECT_PROMPT_INJECTION]: As the skill ingests and processes note titles to detect changes, it creates an inherent surface for indirect prompt injection if a note title contains malicious instructions. The risk is minimized by the skill's focus on metadata rather than note bodies.
[DATA_EXPOSURE]: The skill accesses note metadata including titles, internal IDs, and modification timestamps. The documentation explicitly advises against exfiltrating note bodies and suggests using salted hashes or opaque identifiers for event records.

apple-notes-webhooks-events