apple-notes
Pass
Audited by Gen Agent Trust Hub on Jun 20, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the
memoCLI tool from a third-party Homebrew repository (antoniorodr/memo). This is a standard installation method for macOS CLI utilities. - [COMMAND_EXECUTION]: The skill executes shell commands using the
memobinary to create, view, search, and delete notes within the local Apple Notes application. - [INDIRECT_PROMPT_INJECTION]: The skill has a surface for indirect prompt injection because it reads and processes the content of Apple Notes, which could contain malicious instructions.
- Ingestion points: Note content retrieved via
memo notesand search results (SKILL.md). - Boundary markers: None explicitly defined to separate note content from agent instructions.
- Capability inventory: Execution of shell commands via the
memoCLI. - Sanitization: No evidence of sanitization or filtering of note content before processing.
Audit Metadata