omnifocus
Pass
Audited by Gen Agent Trust Hub on Mar 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of the
@stephendolan/omnifocus-clipackage from the npm registry to provide its core functionality.- [COMMAND_EXECUTION]: The skill operates by executing shell commands (of) to interact with the local OmniFocus application and utilizesjqfor processing JSON output.- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it processes task names, notes, and project metadata which could contain malicious instructions if the OmniFocus database is populated from untrusted external sources like email or shared projects. - Ingestion points: Data is ingested through
of task list,of task view,of search, andof inbox listcommands inSKILL.md. - Boundary markers: No explicit boundary markers or instructions are provided to the agent to treat data from the database as untrusted content.
- Capability inventory: The skill possesses the capability to execute shell commands and process system data.
- Sanitization: There is no evidence of sanitization or content validation performed on the strings retrieved from OmniFocus before they are used in the agent's context.
Audit Metadata