desktop-app-flows
Warn
Audited by Socket on Mar 23, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: The stated purpose is coherent for desktop UI exploration, and there is no clear credential harvesting or exfiltration path. However, the skill’s core dependence on an unverifiable external CLI (`agent-swift`) materially raises trust risk, especially because that CLI can read broad accessibility/UI data and drive live app actions. Main concern is supply-chain and local data exposure, not confirmed malware.
Confidence: 84%Severity: 74%
Audit Metadata