Security audit
Apple PIM
Security checks for vulnerabilities and agentic risk
Overview
The optional email channel starts agent runs for unapproved senders without enforcing read-only access.
Leave the email channel unconfigured until closed mode and read-only handling are enforced. The tools grant substantial personal-data access, so limit available mutation tools and retain default attachment denial. SkillSpector reported this package as not applicable; that result does not establish runtime safety.
SkillSpector was not run because this plugin release contains no bundled skills.
Static analysis
No suspicious patterns detected.