Security audit
Apple PIM
Security checks for vulnerabilities and agentic risk
Overview
This plugin exposes powerful local Apple Calendar, Reminders, Contacts, and Mail access, but the reviewed artifacts disclose that scope and include purpose-aligned controls for mail automation and attachments.
Install only if you want an agent to manage your local Apple Calendar, Reminders, Contacts, and Mail. Review the Swift CLI source you build locally, grant macOS permissions only for the domains you intend to use, configure the Mail channel allowlists and self addresses carefully, and keep mail attachments disabled unless you need them with narrow allowed roots.
SkillSpector was not run because this plugin release contains no bundled skills.
Static analysis
No suspicious patterns detected.