apple-reminders

Pass

Audited by Gen Agent Trust Hub on Mar 9, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill requires the installation of remindctl, an external command-line tool. It suggests installation via Homebrew from a third-party repository: steipete/tap/remindctl.
  • [COMMAND_EXECUTION]: The skill operates by executing the remindctl binary with various arguments to list, add, edit, and delete reminders. It also executes installation and authorization commands like brew install, remindctl authorize, and pnpm build.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest data from the user's Apple Reminders database.
  • Ingestion points: The output of remindctl, remindctl list, and remindctl today is read by the agent (SKILL.md).
  • Boundary markers: None present in the instructions to distinguish between reminder content and agent instructions.
  • Capability inventory: The skill has the capability to modify or delete data via remindctl edit, remindctl complete, and remindctl delete.
  • Sanitization: No explicit sanitization or validation of the reminder content is performed before the agent processes it.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 9, 2026, 09:12 PM