Apple Shortcuts Integration
Warn
Audited by Socket on Oct 22, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The skill's stated purpose is plausible and mostly aligned with its Apple automation capabilities, but it relies on an unpinned, non-official 'apple-mcp' component with no verified same-org source or release integrity in the skill itself. I found no direct credential harvesting or third-party data routing in the text, so this is not confirmed malware, but the external MCP dependency makes overall install and execution trust high risk.
Confidence: 83%Severity: 78%
Audit Metadata