notes-inventory
Pass
Audited by Gen Agent Trust Hub on Jul 24, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the Bash tool to execute a local script (
notes.ts) via the Bun runtime. This script interacts with the macOS Notes application using AppleScript to retrieve organizational data. - [PROMPT_INJECTION]: The skill is susceptible to Indirect Prompt Injection because it processes folder names from a user's macOS Notes.
- Ingestion points: Folder and account names are retrieved from the macOS Notes application via
bun inventory. - Boundary markers: No specific delimiters or "ignore instructions" warnings are provided in the skill's description for the output of the inventory command.
- Capability inventory: The skill has access to the Bash tool and can execute files on the local system.
- Sanitization: The skill does not explicitly describe any sanitization or filtering of the retrieved folder names before they are presented to or processed by the AI agent.
Audit Metadata