iCloud Reminders

Manage Apple iCloud Reminders via CloudKit API. Use for listing, adding, completing, deleting reminders, managing lists, and hierarchical subtasks. Works wit...

Security Scan

The skill's stated purpose (manage iCloud Reminders) matches the runtime instructions and install method, but the SKILL.md asks for sensitive Apple ID credentials and session files that are not declared in the registry metadata and the Homebrew install comes from a third‑party tap — review before installing.

Purpose & Capability

The skill is an instruction-only wrapper that relies on a 'reminders' binary to talk to CloudKit; requiring a binary named 'reminders' and offering Homebrew installation is consistent with the stated purpose of managing iCloud Reminders.

Instruction Scope

SKILL.md limits actions to iCloud Reminders (auth, list, add, edit, complete, delete, session export/import, sync). It references reading/writing its own config files (~/.config/icloud-reminders/credentials and ~/.config/icloud-reminders/session.json) and optionally using ICLOUD_USERNAME/ICLOUD_PASSWORD environment variables. There are no instructions to read unrelated system files or exfiltrate data, but the ability to export session.tar.gz is sensitive because session exports can be reused to access the account.

Install Mechanism

Install uses Homebrew formula 'icloud-reminders' from the third‑party tap 'tarekbecker/tap'. Homebrew is a common packaging method, but using a non‑official tap increases the need to review the formula/tap contents before installing.

Credentials

SKILL.md documents optional use of ICLOUD_USERNAME and ICLOUD_PASSWORD environment variables and a credentials file under ~/.config/icloud-reminders, but the registry metadata lists no required env vars or primary credential. This mismatch is problematic: the skill legitimately needs Apple ID credentials for auth, but the registry did not declare them. Storing Apple ID passwords in env vars or plaintext files is sensitive and should be done with caution; session files and exported session archives are also high‑value credentials.

Persistence & Privilege

The skill does not request always:true and does not claim to change other skills or system-wide settings. It creates/uses session files within its own config directory, which is expected for credential/session caching.

What to consider before installing

This skill is mostly coherent with its purpose but requires handing over your Apple ID credentials or session files (sensitive data). Before installing: 1) Inspect the Homebrew tap/formula (tarekbecker/tap) and the linked GitHub repo to verify the code and packaging; do not install blindly from an unfamiliar tap. 2) Prefer interactive auth (reminders auth) over setting ICLOUD_USERNAME/ICLOUD_PASSWORD as environment variables or storing plaintext credentials in ~/.config/icloud-reminders/credentials. 3) Treat ~/.config/icloud-reminders/session.json and any exported session.tar.gz as secret — do not share them. 4) If you must use env vars or credential files, ensure restrictive file permissions and consider creating a dedicated Apple ID for automation. 5) The registry metadata should have declared the credential requirements; ask the publisher/registry maintainer to correct the metadata if you plan to use this skill. If you cannot review the tap/formula or are uncomfortable providing Apple credentials, avoid installing.

Access and manage Apple iCloud Reminders via CloudKit API. Full CRUD with hierarchical subtask support.

Pure Go — no Python or pyicloud required. Authentication, 2FA, session management and CloudKit API calls are all implemented natively in Go.

Installation

Homebrew (Recommended)

brew tap tarekbecker/tap
brew install icloud-reminders

Upgrade to the latest version:

brew upgrade icloud-reminders

Setup

1. Authenticate (interactive — required on first run):

   reminders auth
   

   Credentials are resolved in this order:

   1. ICLOUD_USERNAME / ICLOUD_PASSWORD environment variables
   2. ~/.config/icloud-reminders/credentials file (export KEY=value format)
   3. Interactive prompt (fallback)

2. Session file (~/.config/icloud-reminders/session.json) is created automatically and reused. Run reminders auth again when the session expires.

Commands

# First-time setup / force re-auth
reminders auth
reminders auth --force

# List all active reminders (hierarchical)
reminders list

# Filter by list name
reminders list -l "🛒 Groceries"

# Include completed
reminders list --all          # or: -a

# Show only children of a parent reminder (by name or short ID)
reminders list --parent "Supermarket"
reminders list --parent ABC123DE

# Search by title
reminders search "milk"

# Search including completed
reminders search "milk" --all   # or: -a

# Show all lists (with active counts and short IDs)
reminders lists

# Add reminder (-l is REQUIRED)
reminders add "Buy milk" -l "Groceries"

# Add with due date and priority
reminders add "Call mom" -l "Groceries" --due 2026-02-25 --priority high

# Add with notes
reminders add "Buy milk" -l "Groceries" --notes "Get the organic 2% stuff"

# Add as subtask (-l is REQUIRED even for subtasks)
reminders add "Butter" -l "🛒 Groceries" --parent ABC123DE

# Add multiple at once (batch; -l is REQUIRED)
reminders add-batch "Butter" "Cheese" "Milch" -l "Groceries"

# Add multiple as subtasks
reminders add-batch "Butter" "Cheese" -l "Groceries" --parent ABC123DE

# Edit a reminder (update title, due date, notes, or priority)
reminders edit abc123 --title "New title"
reminders edit abc123 --due 2026-03-01 --priority high
reminders edit abc123 --notes "Updated notes"
reminders edit abc123 --priority none

# Complete reminder
reminders complete abc123

# Delete reminder
reminders delete abc123

# Export as JSON
reminders json

# Force full resync
reminders sync

# Export session cookies (share without password)
reminders export-session session.tar.gz

# Import session from export
reminders import-session session.tar.gz

# Verbose output (any command)
reminders list -v

Troubleshooting

Issue	Solution
"not authenticated"	Run reminders auth
"invalid Apple ID or password"	Check credentials file
"2FA failed"	Re-run auth, enter a fresh code
"Missing change tag"	Run reminders sync
"List not found"	Check name with reminders lists
Binary not found	Run bash scripts/build.sh or check your PATH