AGENT SKILL
apple-notes-security-basics
Apply security best practices for Apple Notes automation scripts. Trigger: "apple notes security".
使用场景Skill与智能体开发
- License 许可
- MIT
- 最近更新
- 2026-06-24
- Stars
- ★ 67
- Forks
- 24
01 前言 Front Matter
- name
- apple-notes-security-basics
- tags
- [ "saas", "macos", "apple-notes", "automation" ]
- author
- Jeremy Longshore <jeremy@intentsolutions.io>
- license
- MIT
- version
- 1.0.0
- description
- Apply security best practices for Apple Notes automation scripts. Trigger: "apple notes security".
- allowed-tools
- Read, Write, Edit, Bash(osascript:*), Grep
- compatible-with
- claude-code
03 SKILL.md 正文
Apple Notes Security Basics
Security Checklist
- [ ] Scripts run only locally (never expose osascript to network)
- [ ] No note content logged to files (may contain sensitive data)
- [ ] TCC permissions scoped to specific apps only
- [ ] Exported notes stored with appropriate file permissions
- [ ] iCloud account uses 2FA
- [ ] Automation scripts do not hardcode note content
AppleScript Sandbox Restrictions
# Apple Notes runs inside the macOS sandbox
# Scripts can only access Notes via Apple Events (not direct file access)
# The Notes database is at ~/Library/Group Containers/group.com.apple.notes/
# Direct database access is NOT recommended (encrypted, undocumented schema)
Safe Export Pattern
# Export with restricted permissions
osascript -l JavaScript -e "..." > /tmp/notes-export.json
chmod 600 /tmp/notes-export.json
# Process then delete
rm /tmp/notes-export.json
