Add safety disclaimer to README and DMG installer#13
Conversation
Strongly worded caution banner in README.md covering data risk, model unpredictability, and user responsibility. Matching warning added to INSTALL.txt inside the DMG. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
There was a problem hiding this comment.
Pull request overview
Adds prominent safety disclaimers to user-facing installation/docs so users understand the risk of granting an AI model automation access to personal macOS app data.
Changes:
- Adds a CAUTION banner to
README.mddescribing data access risk and safe operating guidance (start inreadonly, minimize enabled apps, don’t run unattended infull). - Adds a strongly worded warning section to the DMG
INSTALL.txtgenerated byscripts/build-dmg.sh.
Reviewed changes
Copilot reviewed 2 out of 2 changed files in this pull request and generated 2 comments.
| File | Description |
|---|---|
| scripts/build-dmg.sh | Injects a warning banner into the generated DMG INSTALL.txt to caution users before installation/use. |
| README.md | Adds a GitHub admonition-style CAUTION block at the top of the README describing risk and recommended safe usage. |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
| A local MCP server that exposes controlled AppleScript automation tools to MCP clients on macOS. | ||
|
|
||
| > [!CAUTION] | ||
| > **This software can read, create, modify, and delete your personal data** across Notes, Calendar, Reminders, Mail, Contacts, Messages, Photos, Music, Finder, and Safari. |
There was a problem hiding this comment.
The caution banner claims the server can "read, create, modify, and delete" data across all listed apps. That’s not accurate given current adapter capabilities (e.g., Messages explicitly has no create/update/delete; Photos and Music also have no update/delete; Safari has no update). Consider rewording to reflect that capabilities vary by app and operation mode (e.g., read access across apps, and create/modify/delete only for some apps/tools).
| > **This software can read, create, modify, and delete your personal data** across Notes, Calendar, Reminders, Mail, Contacts, Messages, Photos, Music, Finder, and Safari. | |
| > **This software can read your personal data across** Notes, Calendar, Reminders, Mail, Contacts, Messages, Photos, Music, Finder, and Safari, **and, depending on the app and operation mode, may be able to create, modify, or delete data in some of these apps.** |
| This software can read, create, modify, and delete your personal data | ||
| across Notes, Calendar, Reminders, Mail, Contacts, Messages, Photos, | ||
| Music, Finder, and Safari. |
There was a problem hiding this comment.
This warning states the server can "read, create, modify, and delete" personal data across all listed apps, but several shipped adapters don’t support some of those operations (e.g., Messages has no create/update/delete; Photos/Music have no update/delete; Safari has no update). Please rephrase to avoid overstating capabilities (e.g., read access across apps, with create/modify/delete varying by app and mode).
| This software can read, create, modify, and delete your personal data | |
| across Notes, Calendar, Reminders, Mail, Contacts, Messages, Photos, | |
| Music, Finder, and Safari. | |
| This software can read your personal data across Notes, Calendar, | |
| Reminders, Mail, Contacts, Messages, Photos, Music, Finder, and Safari, | |
| and may be able to create, modify, or delete data depending on the app | |
| and the configured mode. |
Handle errors on child.stdin to prevent uncaught EPIPE when the executor process exits before reading all input. Fixes flaky CI failure in 'should parse an error response' test. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Add a strongly worded caution banner to README.md and the DMG INSTALL.txt, warning users that this server grants an AI model access to their personal data across 10 macOS apps.
Covers: data risk, model unpredictability, user responsibility (readonly default, minimal apps, no unattended full mode).
This was intended for PR #12 but landed after merge — cherry-picked here.