ClawHub
Back to skill

Security audit

Apple Reminder

Security checks across malware telemetry and agentic risk

Overview

This skill is a disclosed Apple Reminders helper, but it can edit, complete, and permanently delete synced reminders.

Install only if you want an agent to manage your Apple Reminders. Verify remindctl is trusted, review the matched reminder ID and title before edits, completion, or deletion, and treat deletes as permanent because they may sync across Apple devices.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (4)

Tp4

High
Category
MCP Tool Poisoning
Confidence
91% confidence
Finding
The top-level description says the skill creates natural-language reminders, but the documented behavior also includes listing, editing, completing, and permanently deleting existing reminders. This capability mismatch can mislead an orchestrating agent or user about the scope of actions the skill may take, increasing the chance of unintended modification or destruction of reminder data.

Description-Behavior Mismatch

High
Confidence
95% confidence
Finding
The skill metadata says it creates reminders, but this script adds a destructive capability that deletes existing reminders. That scope mismatch is dangerous because a caller or downstream agent may trust the advertised behavior and invoke the skill without expecting data-destructive side effects, leading to unauthorized or accidental reminder loss.

Vague Triggers

Medium
Confidence
88% confidence
Finding
The deletion guidance uses broad natural-language triggers like 'Delete [reminder]' or 'Remove [reminder]' without requiring disambiguation, exact matching, or confirmation. In an agent setting, ambiguous user phrasing or fuzzy reminder-name matching can cause the wrong reminder to be deleted, and deletion is documented as permanent.

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The skill explicitly supports permanent deletion but provides no warning, safeguard, or confirmation workflow in the user-facing documentation. Because reminder data syncs across Apple devices, an accidental or misinterpreted delete can propagate immediately and cause irreversible loss of user data.

VirusTotal

56/56 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.