Things Mac 1.0.0

• Analyzed: May 11, 2026, 6:35 AM
• Findings: 1
• Version: 1.0.0
• Hash: 0a1a94a5fb71c9ca6dc0ee13bdf797086a4c7999f7c785a2e496ee5fb0f73a41
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle provides a legitimate interface for managing the Things 3 task manager on macOS using the open-source `things3-cli` tool. It includes standard installation instructions via `go install` from a public repository (github.com/ossianhempel/things3-cli) and provides clear documentation for the agent to read and update tasks. While it mentions the need for Full Disk Access, this is a documented requirement for the CLI tool to access the local SQLite database, and no evidence of malicious intent or data exfiltration was found.