apple-reminders

Pass

Audited by Gen Agent Trust Hub on Aug 1, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill relies on the remindctl command-line utility to interact with the local macOS Reminders database. The instructions provide numerous examples of executing this binary to list, add, edit, and delete reminder data.
  • [EXTERNAL_DOWNLOADS]: The skill metadata and setup instructions direct the user to install the remindctl tool from a third-party Homebrew tap (steipete/tap/remindctl) or to build it from the provided GitHub source repository.
  • [PROMPT_INJECTION]: The skill processes reminder content (such as titles and list names), which introduces an indirect prompt injection attack surface. If an attacker places malicious instructions within a reminder's title, the agent could potentially interpret those instructions when fetching and processing the reminder list.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 1, 2026, 08:32 AM
Security Audit — agent-trust-hub — apple-reminders