fda-read
Warn
Audited by Socket on Jul 16, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The skill is internally consistent, but its stated purpose is to bypass macOS privacy controls and expose protected personal data to an agent by copying it into a readable location. There is no external installer or network exfiltration, so this is not confirmed malware, but it is a high-risk privacy-bypass capability with some privileged shell-invocation risk.
Confidence: 91%Severity: 82%
Audit Metadata