apple-reminders
Pass
Audited by Gen Agent Trust Hub on Mar 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of
remindctl, an external command-line tool. It suggests installation via Homebrew from a third-party repository:steipete/tap/remindctl. - [COMMAND_EXECUTION]: The skill operates by executing the
remindctlbinary with various arguments to list, add, edit, and delete reminders. It also executes installation and authorization commands likebrew install,remindctl authorize, andpnpm build. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest data from the user's Apple Reminders database.
- Ingestion points: The output of
remindctl,remindctl list, andremindctl todayis read by the agent (SKILL.md). - Boundary markers: None present in the instructions to distinguish between reminder content and agent instructions.
- Capability inventory: The skill has the capability to modify or delete data via
remindctl edit,remindctl complete, andremindctl delete. - Sanitization: No explicit sanitization or validation of the reminder content is performed before the agent processes it.
Audit Metadata