The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill specifies the installation of the memo CLI tool from a third-party Homebrew tap (antoniorodr/memo/memo). This repository and its owner are not listed among trusted vendors or well-known services.
[COMMAND_EXECUTION]: The skill executes commands using the memo binary to interact with the macOS environment, including operations to list, search, create, edit, and delete data.
[DATA_EXFILTRATION]: The skill accesses sensitive personal data stored within Apple Notes. While no explicit network exfiltration is identified, the skill possesses the capability to export note content to external formats like HTML or Markdown via the -ex flag.
[PROMPT_INJECTION]: The skill is vulnerable to indirect prompt injection due to its processing of untrusted data from note contents.
Ingestion points: Note content is ingested into the agent context through the memo notes and memo notes -s commands in SKILL.md.
Boundary markers: None; the skill does not use delimiters or instructions to prevent the agent from obeying commands embedded within notes.
Capability inventory: The skill includes commands for system-level data modification (create, edit, delete) and export via the memo CLI.
Sanitization: There is no evidence of sanitization or content filtering for the data retrieved from Apple Notes.

apple-notes