Agent skill · security · jeremylongshore
apple-notes-security-basics
Apply security best practices for Apple Notes automation scripts.
Why this skill is useful
Provides specific security patterns and scripts for managing Apple Notes automation that the AI wouldn't reliably generate on its own.
What it needs
Requires osascript, security, sqlite3 installed locally. About 3k tokens when loaded. Last updated 2026-08-07. 2,604 stars on the source repository.
What this skill does
Apple Notes Security Basics Overview Apple Notes security involves three layers: macOS TCC (Transparency, Consent, and Control) which gates which apps can send Apple Events to Notes.app, the macOS sandbox that prevents direct database access, and iCloud encryption that protects notes in transit and at rest. For automation scripts, the primary security concerns are: preventing unauthorized Apple Events access, securing exported note data, avoiding credential leakage in scripts, and understanding the difference between standard and end-to-end encrypted (locked) notes. Prerequisites An inventory of the invoking app, macOS user, account scope, and required operation class. A documented incident owner and revocation procedure for automation permissions and exported artifacts. A test account for exercising write paths; never use a live note as a security test fixture. Instructions 1. Grant Apple Events consent only through System Settings or an approved MDM profile for the exact client application. 2. Keep automation local and reject network-provided note content, script fragments, and shell arguments. 3. Encrypt backups, restrict access before writing, and delete temporary artifacts through a verified retention process. 4. Skip locked or unreadable notes, record a redacted failure, and require a user to handle them in Notes.app. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills jeremylongshore/apple-notes-security-basics