apple-reminders
Pass
Audited by Gen Agent Trust Hub on Mar 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes the
remindctlcommand-line utility to interact with the macOS Reminders database. - [EXTERNAL_DOWNLOADS]: Requires installation of
remindctlfrom a third-party Homebrew tap (steipete/tap/remindctl), which is an external code source not on the trusted vendor list. - [PROMPT_INJECTION]: Vulnerable to indirect prompt injection because the agent processes reminder titles and notes that could contain malicious instructions.
- Ingestion points: reminder data retrieved via
remindctlandremindctl list. - Boundary markers: None.
- Capability inventory: CLI command execution via
remindctl. - Sanitization: None.
Audit Metadata