mac-mini-screen-sharing
Warn
Audited by Socket on Jun 13, 2026
2 alerts found:
AnomalySecurityAnomalyscripts/setup-mac-mini-autoscreen.sh
LOWAnomalyLOW
scripts/setup-mac-mini-autoscreen.sh
This code is not evidently malicious; it is a credential-handling automation script that uses a user-entered password to run a narrowly scoped privileged remote configuration change over SSH (disabling a Screen Sharing permission requirement and restarting the service) and then stores the password in the local macOS Keychain. The primary security concerns are operational: environment-variable-driven target selection without validation, lack of explicit SSH host authenticity pinning, and use of sudo -S with stdin-password (high impact if misdirected).
Confidence: 100%Severity: 60%
SecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
Audit Metadata