apple-music

Warn

Audited by Socket on Oct 26, 2026

1 alert found:

Anomaly
AnomalyLOW
src/applemusic_mcp/safari.py

The supplied fragment appears to implement a local Apple Music/Safari session-token retrieval feature rather than clearly malicious behavior. It does access a sensitive browser session token through Apple Events, so use requires strong user consent and careful handling. No exfiltration or destructive behavior is visible, but the missing _HARVEST_SCRIPT and truncated return statement prevent complete assessment.

Confidence: 92%Severity: 58%
Audit Metadata
Analyzed At
Oct 26, 2026, 04:39 AM
Package URL
pkg:socket/skills-sh/epheterson%2Fapplemusic-mcp%2Fapple-music%2F@3f21259f914a8c64058bdcfaa99f3d930ee15fe8