things-mac
Pass
Audited by Gen Agent Trust Hub on Mar 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the
things3-clitool via Go fromgithub.com/ossianhempel/things3-cli/cmd/things@latest. This is a standard installation procedure for a Go-based CLI tool. - [COMMAND_EXECUTION]: The skill executes the
thingscommand-line utility to perform read and write operations. Read operations query the local Things SQLite database, while write operations utilize the official Things URL scheme (things:///). - [PRIVILEGE_ESCALATION]: The documentation mentions that the calling application may require 'Full Disk Access' permissions on macOS to read the Things database file located in the user's Library folder. This is a standard macOS security requirement for accessing application-specific data stores.
Audit Metadata