screenstudio-alt

Fail

Audited by Socket on Jul 1, 2026

1 alert found:

Malware
MalwareHIGH
src/events-log.swift

This Swift module is a macOS input event logger: it installs a system-wide CGEvent tap to capture keystrokes (Unicode text) and mouse clicks, and it samples cursor movement continuously, persisting all of it to a JSONL file chosen via command-line arguments. It includes a “secure input” suppression mechanism that records only a marker during secure input contexts, which is consistent with evading password/secure-entry capture. No exfiltration is shown in the fragment, but the local persistence of sensitive user interaction data makes the security/privacy risk very high.

Confidence: 84%Severity: 92%
Audit Metadata
Analyzed At
Jul 1, 2026, 10:25 AM
Package URL
pkg:socket/skills-sh/connerkward%2Fscreenstudio-alt-skill%2Fscreenstudio-alt%2F@61a0b303ce3a73d103398fee7ecb5fa31f8a0994
Security Audit — socket — screenstudio-alt