apple-reminders
Pass
Audited by Gen Agent Trust Hub on Jun 19, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the 'remindctl' utility via the Homebrew package manager from the 'steipete/tap/remindctl' formula.
- [COMMAND_EXECUTION]: Uses the 'remindctl' CLI to interact with the system's reminders database for listing, creating, and deleting tasks.
- [PROMPT_INJECTION]: The skill processes data from the Apple Reminders application, creating a surface for indirect prompt injection if a reminder contains malicious instructions.
- Ingestion points: Reminder titles and details fetched via 'remindctl' (SKILL.md).
- Boundary markers: Absent.
- Capability inventory: Command execution via the 'remindctl' tool for task management.
- Sanitization: No explicit filtering or sanitization of retrieved reminder content is performed.
Audit Metadata