apple-music

Pass

Audited by Gen Agent Trust Hub on Oct 9, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes shell commands to control the local environment.
  • It utilizes osascript via subprocess.run to interact with the Apple Music app on macOS. The implementation in applescript.py includes a dedicated _escape_for_applescript function that sanitizes input by escaping backslashes, quotes, and stripping control characters like newlines and tabs to prevent injection attacks.
  • It uses pgrep in browser.py to check for existing browser processes.
  • [EXTERNAL_DOWNLOADS]: The skill manages external browser dependencies.
  • It uses the Playwright library to automate a local Chrome instance for DRM-protected playback and authentication. In browser.py, the skill includes functionality to automatically download and install the Chromium browser binary if it is missing from the host system.
  • [DYNAMIC_EXECUTION]: The skill assembles and executes code at runtime.
  • It dynamically generates AppleScript strings in applescript.py to perform operations like playlist creation and track resolution.
  • It constructs and executes JavaScript snippets within a browser context using Playwright's page.evaluate and Safari's do JavaScript AppleScript command, as seen in browser.py and safari_player.py. The JavaScript code is sourced from musickit_js.py and is used to drive the MusicKit web player.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 9, 2026, 02:36 PM