邮件日程

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:33 PM UTC
• Version:
  1.0.0

Overview

This skill does what it advertises: it reads selected local macOS Mail data and creates local reminders from detected event times.

Install only if you are comfortable letting the agent inspect the selected range of your local macOS Mail metadata and summaries and create items in Reminders. Start with a narrow range like today, and ask the agent to preview proposed reminders before creation if you want tighter control.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (4)

Missing User Warnings

Medium

• Confidence: 95% confidence
• Finding: The skill directs the agent to access the user's local Mail database and then create reminders automatically, but it does not require explicit informed consent for reading potentially sensitive email contents or for performing the side effect of creating reminders. This can lead to privacy violations and unintended actions, especially because email bodies may contain confidential personal, financial, or business information.

Missing User Warnings

Medium

• Confidence: 94% confidence
• Finding: This script automatically creates reminders from email content without any user confirmation, dry-run mode, or disclosure before modifying reminder data. In an agent/skill context, that can cause unintended writes to a user's reminder store based on malformed, spoofed, or adversarial emails, making it a real integrity and consent issue.

Missing User Warnings

Medium

• Confidence: 92% confidence
• Finding: Email-derived `title` and `notes` are forwarded to an external tool (`remindctl`) with no disclosure that user email content is being transmitted outside the script. Even if `remindctl` is local, this is still a boundary crossing to another component and may expose sensitive sender/summary data without user awareness.

Missing User Warnings

Medium

• Confidence: 95% confidence
• Finding: The script directly accesses the user's local Apple Mail SQLite database and exports sensitive email metadata and message summaries as JSON with no consent prompt, scope restriction beyond a simple range argument, or privacy notice. In an agent-skill context, this is dangerous because email data is highly sensitive and the script enables silent collection and exfiltration of private communications if invoked by another component.

VirusTotal

66/66 vendors flagged this skill as clean.