macos-notes — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited macos-notes (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Manage Apple Notes via $SKILL_DIR/scripts/notes.sh. Notes content is stored as HTML internally; the script accepts plain text or HTML body and returns plaintext when reading.
Always list folders first to discover accounts and folder names:
"$SKILL_DIR/scripts/notes.sh" list-foldersOutput format: account → folder (one per line).
echo '<json>' | "$SKILL_DIR/scripts/notes.sh" create-noteJSON fields:
| Field | Required | Default | Description |
|---|---|---|---|
title | yes | - | Note title (becomes the first line / heading) |
body | no | "" | Note content (plain text — converted to HTML automatically) |
html | no | "" | Raw HTML body (overrides body if both provided) |
folder | no | default folder | Folder name (from list-folders) |
account | no | default account | Account name (from list-folders) |
echo '<json>' | "$SKILL_DIR/scripts/notes.sh" read-noteJSON fields:
| Field | Required | Default | Description |
|---|---|---|---|
name | yes | - | Note title (exact match) |
folder | no | all folders | Folder to search in |
account | no | default account | Account to search in |
echo '<json>' | "$SKILL_DIR/scripts/notes.sh" list-notesJSON fields:
| Field | Required | Default | Description |
|---|---|---|---|
folder | no | default folder | Folder name |
account | no | default account | Account name |
limit | no | 20 | Max notes to return |
echo '<json>' | "$SKILL_DIR/scripts/notes.sh" search-notesJSON fields:
| Field | Required | Default | Description |
|---|---|---|---|
query | yes | - | Text to search for in note titles |
account | no | default account | Account to search in |
limit | no | 10 | Max results to return |
Map user requests to commands:
| User says | Command | Key fields |
|---|---|---|
| "Note this down: ..." | create-note | title, body |
| "Save meeting notes" | create-note | title: "Meeting notes — <date>", body |
| "What did I write about X?" | search-notes | query: "X" |
| "Show my notes" | list-notes | (defaults) |
| "Read my note about X" | read-note | name: "X" |
| "Save this in my work notes" | create-note | Match closest account/folder from list-folders |
"Note down the API key format: prefix_xxxx"
echo '{"title":"API key format","body":"Format: prefix_xxxx"}' | "$SKILL_DIR/scripts/notes.sh" create-note"Show my recent notes"
echo '{}' | "$SKILL_DIR/scripts/notes.sh" list-notes"What did I write about passwords?"
echo '{"query":"password"}' | "$SKILL_DIR/scripts/notes.sh" search-notes"Read my note about Hinge"
echo '{"name":"Hinge"}' | "$SKILL_DIR/scripts/notes.sh" read-note"Create a meeting summary in my iCloud notes"
"$SKILL_DIR/scripts/notes.sh" list-foldersThen:
echo '{"title":"Meeting summary — 2026-02-17","body":"Discussed roadmap.\n- Q1: launch MVP\n- Q2: iterate","account":"iCloud","folder":"Notes"}' | "$SKILL_DIR/scripts/notes.sh" create-notefolder: "Notes" alone is ambiguouslogs/notes.log with timestamp, command, and note titlebody are converted to <br> automatically; use html for rich formatting~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.