apple-reminders
Pass
Audited by Gen Agent Trust Hub on Jul 8, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill functions by executing the
remindctlbinary to interact with the macOS EventKit framework. All reminder management tasks are performed through this CLI tool. - [DATA_EXFILTRATION]: The skill accesses sensitive user data stored within Apple Reminders. Specifically, the
doctorcommand is designed to read diagnostic information directly from the Reminders SQLite database located in the user's library (~/Library/Group Containers/group.com.apple.reminders/Container_v1/Stores/). While this access is used to provide counts of tags and sections not available via standard public APIs and does not involve network transmission, it represents access to private system data stores. - [PROMPT_INJECTION]: As the skill reads existing reminders which may contain arbitrary text, it possesses a surface for indirect prompt injection. Maliciously crafted reminders could contain instructions intended to influence the agent's behavior. The skill's instructions do not currently include explicit delimiters or sanitization for this external content.
Audit Metadata