fda-read

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). This skill deliberately bypasses macOS TCC by instructing a Full Disk Access app (Terminal.app) to copy TCC-protected files (e.g., Messages, AddressBook) into an unrestricted location, enabling unauthorized access and local exfiltration of sensitive user data.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). This skill explicitly instructs the agent to bypass macOS TCC protections by delegating file copies through a Full Disk Access Terminal.app (via osascript) to read sensitive user data (Messages, AddressBook), which compromises system security and user privacy.