apple-music
Warn
Audited by Socket on Oct 26, 2026
1 alert found:
AnomalyAnomalysrc/applemusic_mcp/safari.py
LOWAnomalyLOW
src/applemusic_mcp/safari.py
The supplied fragment appears to implement a local Apple Music/Safari session-token retrieval feature rather than clearly malicious behavior. It does access a sensitive browser session token through Apple Events, so use requires strong user consent and careful handling. No exfiltration or destructive behavior is visible, but the missing _HARVEST_SCRIPT and truncated return statement prevent complete assessment.
Confidence: 92%Severity: 58%
Audit Metadata