Agent skill

apple-notes-security-basics

Apply security best practices for Apple Notes automation scripts. Trigger: "apple notes security".

Stars 1,803
Forks 241

Install this agent skill to your Project

npx add-skill https://github.com/jeremylongshore/claude-code-plugins-plus-skills/tree/main/plugins/saas-packs/apple-notes-pack/skills/apple-notes-security-basics

SKILL.md

Apple Notes Security Basics

Security Checklist

  • Scripts run only locally (never expose osascript to network)
  • No note content logged to files (may contain sensitive data)
  • TCC permissions scoped to specific apps only
  • Exported notes stored with appropriate file permissions
  • iCloud account uses 2FA
  • Automation scripts do not hardcode note content

AppleScript Sandbox Restrictions

bash
# Apple Notes runs inside the macOS sandbox
# Scripts can only access Notes via Apple Events (not direct file access)
# The Notes database is at ~/Library/Group Containers/group.com.apple.notes/
# Direct database access is NOT recommended (encrypted, undocumented schema)

Safe Export Pattern

bash
# Export with restricted permissions
osascript -l JavaScript -e "..." > /tmp/notes-export.json
chmod 600 /tmp/notes-export.json
# Process then delete
rm /tmp/notes-export.json

Resources

Expand your agent's capabilities with these related and highly-rated skills.

Didn't find tool you were looking for?

Be as detailed as possible for better results