notes-export
Pass
Audited by Gen Agent Trust Hub on Jul 24, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the Bash tool to execute a local script (notes.ts) via the bun runtime to manage the export process and interact with the macOS Notes application.
- [DATA_EXFILTRATION]: The skill reads the entire Apple Notes library. While this is the intended purpose for backup to local storage (~/.local/share/notes-commander/export/), it involves access to sensitive personal information. It also integrates with a local semantic index tool (mempalace).
- [PROMPT_INJECTION]: The skill creates an export corpus that creates an indirect prompt injection surface for other skills that might analyze the output.
- Ingestion points: The scripts/notes.ts file reads all content from the Apple Notes library as defined in SKILL.md.
- Boundary markers: No delimiters or instructions are added to the exported markdown files to isolate note content from potential instructions.
- Capability inventory: The skill has access to the Bash and Read tools.
- Sanitization: The skill applies safeFilename for files but does not describe content-level sanitization for the note bodies during the export process.
Audit Metadata