findmy
Warn
Audited by Gen Agent Trust Hub on Apr 29, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONDATA_EXFILTRATIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: Uses
osascript(AppleScript) for UI automation to control the Find My application andscreencaptureto record screen content. - [DATA_EXFILTRATION]: Accesses and extracts highly sensitive personal data, including the real-time physical addresses and geographic coordinates of all devices and AirTags linked to the user's Apple ID.
- [EXTERNAL_DOWNLOADS]: Recommends installing the third-party utility
peekaboofrom a non-official Homebrew tap (steipete/tap/peekaboo) which is outside of standard verified repositories. - [DATA_EXFILTRATION]: Saves screenshots containing private location data to the
/tmp/directory, which is world-readable on macOS, creating a risk of local data exposure to other users or processes. - [COMMAND_EXECUTION]: Suggests establishing ongoing background monitoring through infinite shell loops or
cronjobs, which constitutes a persistence mechanism for tracking.
Audit Metadata