Skills/npm/apple-notes-mcp

apple-notes-mcp@2.15.11

CAUTION

Publisher claims: "MCP server for Apple Notes - read, search, create, edit, organize, and export notes on macOS via Claude and other AI assistants" Observed in sandbox: static analysis only — behavior not yet observed.

Registry npm (MCP server)Publisher sweetrb · joined 0 days agoInstalls 28,666Last detonated 1 h ago
Dispute verdict

Behavior trace

Queued for honeypot run · static analysis only
t+CategoryObserved action

This version has not been detonated yet. The score above counts behavior as unknown (50/100), so it cannot read Verified until the honeypot run completes and replaces this verdict.

Static findings

HIGH
npx invocation of non-well-known packageREADME.md:114 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packagedocs/FULL-DISK-ACCESS.md:129 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packagedocs/FULL-DISK-ACCESS.md:117 · npx invocation of non-well-known package — may execute untrusted code
AST06
MEDIUM
URL using raw IP addressdocs/markdown-templates.md:263 · URL using raw IP address — may bypass domain-based filtering
AST07
HIGH
Access to sensitive file pathsREADME.md:2075 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
npx invocation of non-well-known packagedocs/markdown-templates.md:257 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packagedocs/FULL-DISK-ACCESS.md:63 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packageREADME.md:144 · npx invocation of non-well-known package — may execute untrusted code
AST06
MEDIUM
MCP server using network transport (SSE/HTTP)README.md:14 · MCP server using network transport (SSE/HTTP) — data sent over network
AST04
HIGH
npx invocation of non-well-known packageREADME.md:164 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packagedocs/markdown-templates.md:258 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
Process kill commanddocs/STABILITY-PERF-AUDIT-2026-06-19.md:55 · Process kill command — agent can terminate processes
AST05
HIGH
Outbound HTTP to raw IP addressREADME.md:3246 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07
HIGH
npx invocation of non-well-known packageREADME.md:80 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packagedocs/markdown-templates.md:259 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
Outbound HTTP to raw IP addressdocs/markdown-templates.md:263 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07
MEDIUM
URL using raw IP addressREADME.md:3246 · URL using raw IP address — may bypass domain-based filtering
AST07
HIGH
Access to sensitive file pathsREADME.md:2210 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
MEDIUM
MCP server using network transport (SSE/HTTP)README.md:152 · MCP server using network transport (SSE/HTTP) — data sent over network
AST04
HIGH
npx invocation of non-well-known packagedocs/FULL-DISK-ACCESS.md:41 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packagedocs/FULL-DISK-ACCESS.md:116 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
Access to sensitive file pathsREADME.md:2426 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
Access to sensitive file pathsREADME.md:432 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
npx invocation of non-well-known packageREADME.md:136 · npx invocation of non-well-known package — may execute untrusted code
AST06