Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

iCloud Reminders

v0.1.6

Manage Apple iCloud Reminders via CloudKit API. Use for listing, adding, completing, deleting reminders, managing lists, and hierarchical subtasks. Works wit...

0· 724·1 current·1 all-time
byTarek Becker@tarekbecker

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for tarekbecker/icloud-reminders.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "iCloud Reminders" (tarekbecker/icloud-reminders) from ClawHub.
Skill page: https://clawhub.ai/tarekbecker/icloud-reminders
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Required binaries: reminders
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install icloud-reminders

ClawHub CLI

Package manager switcher

npx clawhub@latest install icloud-reminders
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
The skill is an instruction-only wrapper that relies on a 'reminders' binary to talk to CloudKit; requiring a binary named 'reminders' and offering Homebrew installation is consistent with the stated purpose of managing iCloud Reminders.
Instruction Scope
SKILL.md limits actions to iCloud Reminders (auth, list, add, edit, complete, delete, session export/import, sync). It references reading/writing its own config files (~/.config/icloud-reminders/credentials and ~/.config/icloud-reminders/session.json) and optionally using ICLOUD_USERNAME/ICLOUD_PASSWORD environment variables. There are no instructions to read unrelated system files or exfiltrate data, but the ability to export session.tar.gz is sensitive because session exports can be reused to access the account.
Install Mechanism
Install uses Homebrew formula 'icloud-reminders' from the third‑party tap 'tarekbecker/tap'. Homebrew is a common packaging method, but using a non‑official tap increases the need to review the formula/tap contents before installing.
!
Credentials
SKILL.md documents optional use of ICLOUD_USERNAME and ICLOUD_PASSWORD environment variables and a credentials file under ~/.config/icloud-reminders, but the registry metadata lists no required env vars or primary credential. This mismatch is problematic: the skill legitimately needs Apple ID credentials for auth, but the registry did not declare them. Storing Apple ID passwords in env vars or plaintext files is sensitive and should be done with caution; session files and exported session archives are also high‑value credentials.
Persistence & Privilege
The skill does not request always:true and does not claim to change other skills or system-wide settings. It creates/uses session files within its own config directory, which is expected for credential/session caching.
What to consider before installing
This skill is mostly coherent with its purpose but requires handing over your Apple ID credentials or session files (sensitive data). Before installing: 1) Inspect the Homebrew tap/formula (tarekbecker/tap) and the linked GitHub repo to verify the code and packaging; do not install blindly from an unfamiliar tap. 2) Prefer interactive auth (reminders auth) over setting ICLOUD_USERNAME/ICLOUD_PASSWORD as environment variables or storing plaintext credentials in ~/.config/icloud-reminders/credentials. 3) Treat ~/.config/icloud-reminders/session.json and any exported session.tar.gz as secret — do not share them. 4) If you must use env vars or credential files, ensure restrictive file permissions and consider creating a dedicated Apple ID for automation. 5) The registry metadata should have declared the credential requirements; ask the publisher/registry maintainer to correct the metadata if you plan to use this skill. If you cannot review the tap/formula or are uncomfortable providing Apple credentials, avoid installing.

Like a lobster shell, security has layers — review code before you run it.

Runtime requirements

Clawdis
Binsreminders

Install

Homebrew
Bins: reminders
brew install tarekbecker/tap/icloud-reminders
latestvk978fpq4ezgxerqnfmdxejawsd83r7ny
724downloads
0stars
2versions
Updated 4h ago
v0.1.6
MIT-0

iCloud Reminders

Access and manage Apple iCloud Reminders via CloudKit API. Full CRUD with hierarchical subtask support.

Pure Go — no Python or pyicloud required. Authentication, 2FA, session management and CloudKit API calls are all implemented natively in Go.

Installation

Homebrew (Recommended)

brew tap tarekbecker/tap
brew install icloud-reminders

Upgrade to the latest version:

brew upgrade icloud-reminders

Setup

  1. Authenticate (interactive — required on first run):

    reminders auth
    

    Credentials are resolved in this order:

    1. ICLOUD_USERNAME / ICLOUD_PASSWORD environment variables
    2. ~/.config/icloud-reminders/credentials file (export KEY=value format)
    3. Interactive prompt (fallback)
  2. Session file (~/.config/icloud-reminders/session.json) is created automatically and reused. Run reminders auth again when the session expires.

Commands

# First-time setup / force re-auth
reminders auth
reminders auth --force

# List all active reminders (hierarchical)
reminders list

# Filter by list name
reminders list -l "🛒 Groceries"

# Include completed
reminders list --all          # or: -a

# Show only children of a parent reminder (by name or short ID)
reminders list --parent "Supermarket"
reminders list --parent ABC123DE

# Search by title
reminders search "milk"

# Search including completed
reminders search "milk" --all   # or: -a

# Show all lists (with active counts and short IDs)
reminders lists

# Add reminder (-l is REQUIRED)
reminders add "Buy milk" -l "Groceries"

# Add with due date and priority
reminders add "Call mom" -l "Groceries" --due 2026-02-25 --priority high

# Add with notes
reminders add "Buy milk" -l "Groceries" --notes "Get the organic 2% stuff"

# Add as subtask (-l is REQUIRED even for subtasks)
reminders add "Butter" -l "🛒 Groceries" --parent ABC123DE

# Add multiple at once (batch; -l is REQUIRED)
reminders add-batch "Butter" "Cheese" "Milch" -l "Groceries"

# Add multiple as subtasks
reminders add-batch "Butter" "Cheese" -l "Groceries" --parent ABC123DE

# Edit a reminder (update title, due date, notes, or priority)
reminders edit abc123 --title "New title"
reminders edit abc123 --due 2026-03-01 --priority high
reminders edit abc123 --notes "Updated notes"
reminders edit abc123 --priority none

# Complete reminder
reminders complete abc123

# Delete reminder
reminders delete abc123

# Export as JSON
reminders json

# Force full resync
reminders sync

# Export session cookies (share without password)
reminders export-session session.tar.gz

# Import session from export
reminders import-session session.tar.gz

# Verbose output (any command)
reminders list -v

Troubleshooting

IssueSolution
"not authenticated"Run reminders auth
"invalid Apple ID or password"Check credentials file
"2FA failed"Re-run auth, enter a fresh code
"Missing change tag"Run reminders sync
"List not found"Check name with reminders lists
Binary not foundRun bash scripts/build.sh or check your PATH

Comments

Loading comments...