things-mac

Pass

Audited by Gen Agent Trust Hub on Mar 14, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill installs the things3-cli tool via Go from github.com/ossianhempel/things3-cli/cmd/things@latest. This is a standard installation procedure for a Go-based CLI tool.
  • [COMMAND_EXECUTION]: The skill executes the things command-line utility to perform read and write operations. Read operations query the local Things SQLite database, while write operations utilize the official Things URL scheme (things:///).
  • [PRIVILEGE_ESCALATION]: The documentation mentions that the calling application may require 'Full Disk Access' permissions on macOS to read the Things database file located in the user's Library folder. This is a standard macOS security requirement for accessing application-specific data stores.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 14, 2026, 12:13 AM