Agent Skills: Apple Notes Security Basics

|

UncategorizedID: jeremylongshore/claude-code-plugins-plus-skills/apple-notes-security-basics

Install this agent skill to your local

pnpm dlx add-skill https://github.com/jeremylongshore/claude-code-plugins-plus-skills/tree/HEAD/plugins/saas-packs/apple-notes-pack/skills/apple-notes-security-basics

Skill Files

Browse the full folder contents for apple-notes-security-basics.

Download Skill

Loading file tree…

plugins/saas-packs/apple-notes-pack/skills/apple-notes-security-basics/SKILL.md

Skill Metadata

Name
apple-notes-security-basics
Description
|

Apple Notes Security Basics

Security Checklist

  • [ ] Scripts run only locally (never expose osascript to network)
  • [ ] No note content logged to files (may contain sensitive data)
  • [ ] TCC permissions scoped to specific apps only
  • [ ] Exported notes stored with appropriate file permissions
  • [ ] iCloud account uses 2FA
  • [ ] Automation scripts do not hardcode note content

AppleScript Sandbox Restrictions

# Apple Notes runs inside the macOS sandbox
# Scripts can only access Notes via Apple Events (not direct file access)
# The Notes database is at ~/Library/Group Containers/group.com.apple.notes/
# Direct database access is NOT recommended (encrypted, undocumented schema)

Safe Export Pattern

# Export with restricted permissions
osascript -l JavaScript -e "..." > /tmp/notes-export.json
chmod 600 /tmp/notes-export.json
# Process then delete
rm /tmp/notes-export.json

Resources