The Agent Skills Directory

[PRIVILEGE_ESCALATION]: The setup instructions require granting 'Full Disk Access' (FDA) to the bun binary. FDA is a high-privilege macOS permission that allows an application to read sensitive files from other apps, including Mail, Messages, and Safari data, bypassing standard user privacy protections.\n- [EXTERNAL_DOWNLOADS]: The skill directs the user to clone a third-party community repository (github.com/connerkward/mcp-apple-notes) and run bun install. This process downloads code and dependencies from unverified external sources.\n- [REMOTE_CODE_EXECUTION]: By registering the MCP server to execute index.ts from the community repository using the bun runtime, the skill facilitates the execution of third-party code on the user's machine.\n- [COMMAND_EXECUTION]: The manual setup involves executing several shell commands, including brew install, git clone, and bun install, to configure the environment.\n- [DATA_EXFILTRATION]: The skill accesses the private NoteStore.sqlite database. While intended for search, the requested 'Full Disk Access' permission enables the server to access any sensitive file on the system.\n- [INDIRECT_PROMPT_INJECTION]: The skill ingests content from user-generated notes which could contain malicious instructions designed to influence the agent's behavior during synthesis.\n
Ingestion points: Notes content is read from NoteStore.sqlite via the tools defined in SKILL.md.\n
Boundary markers: No specific delimiters or safety instructions are defined to separate note content from agent instructions.\n
Capability inventory: The skill provides tools for indexing and searching notes as listed in SKILL.md.\n
Sanitization: The content is processed without validation or sanitization.

apple-notes-search