apple-music
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes shell commands to control the local environment.
- It utilizes
osascriptviasubprocess.runto interact with the Apple Music app on macOS. The implementation inapplescript.pyincludes a dedicated_escape_for_applescriptfunction that sanitizes input by escaping backslashes, quotes, and stripping control characters like newlines and tabs to prevent injection attacks. - It uses
pgrepinbrowser.pyto check for existing browser processes. - [EXTERNAL_DOWNLOADS]: The skill manages external browser dependencies.
- It uses the Playwright library to automate a local Chrome instance for DRM-protected playback and authentication. In
browser.py, the skill includes functionality to automatically download and install the Chromium browser binary if it is missing from the host system. - [DYNAMIC_EXECUTION]: The skill assembles and executes code at runtime.
- It dynamically generates AppleScript strings in
applescript.pyto perform operations like playlist creation and track resolution. - It constructs and executes JavaScript snippets within a browser context using Playwright's
page.evaluateand Safari'sdo JavaScriptAppleScript command, as seen inbrowser.pyandsafari_player.py. The JavaScript code is sourced frommusickit_js.pyand is used to drive the MusicKit web player.
Audit Metadata