apple-notes
Pass
Audited by Gen Agent Trust Hub on Jul 2, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill initiates the installation of the
memoutility from a third-party GitHub repository (antoniorodr/memo) using the Homebrew package manager. - [COMMAND_EXECUTION]: The skill uses shell commands to invoke the
memoCLI for various operations such as listing, searching, creating, and deleting notes. - [DATA_EXPOSURE]: By design, the skill accesses sensitive personal data stored within the user's Apple Notes application.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests content from Apple Notes which could potentially contain malicious instructions intended to manipulate agent behavior.
- Ingestion points: Note content is ingested via
memo notesandmemo notes -scommands. - Boundary markers: Absent. The instructions do not specify delimiters for note content.
- Capability inventory: The skill possesses the ability to create, edit, delete, and move notes using shell commands.
- Sanitization: Absent. There is no mention of content filtering or sanitization before note data is processed by the agent.
Audit Metadata