Apple Shortcuts Integration

Warn

Audited by Socket on Oct 22, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill's stated purpose is plausible and mostly aligned with its Apple automation capabilities, but it relies on an unpinned, non-official 'apple-mcp' component with no verified same-org source or release integrity in the skill itself. I found no direct credential harvesting or third-party data routing in the text, so this is not confirmed malware, but the external MCP dependency makes overall install and execution trust high risk.

Confidence: 83%Severity: 78%
Audit Metadata
Analyzed At
Oct 22, 2026, 12:17 AM
Package URL
pkg:socket/skills-sh/claude-office-skills%2Fskills%2Fapple-shortcuts-integration%2F@2ca826b7d3c0c359de3230835993268382fae69893c17f26634e12573ddd95d3