apple-reminders
Pass
Audited by Gen Agent Trust Hub on Jul 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the
remindctlcommand-line tool from the author's GitHub-hosted Homebrew tap (steipete/tap/remindctl). - [COMMAND_EXECUTION]: The skill operates by executing shell commands using the
remindctlbinary to interact with the macOS Reminders database. - [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface through the ingestion of external data from the Reminders application.
- Ingestion points: Retrieval of reminder titles, notes, and list names via commands like
remindctl today --jsonorremindctl list. - Boundary markers: None defined in the instruction set to separate tool output from instructions.
- Capability inventory: Capability to execute shell commands for reminder management.
- Sanitization: No data sanitization or filtering mechanisms are specified for processing retrieved reminder content.
Audit Metadata