imessage-extraction

Warn

Audited by Socket on Oct 10, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The core capabilities are coherent for an iMessage extraction skill and there is no clear exfiltration path, but the skill requires broad access to highly sensitive local data and references an ambiguously sourced third-party CLI ('yap') without enough provenance detail. Main risk is install trust and privacy exposure, not confirmed malware.

Confidence: 90%Severity: 56%
Audit Metadata
Analyzed At
Oct 10, 2026, 11:53 PM
Package URL
pkg:socket/skills-sh/marcus%2Fmarcus-skills%2Fimessage-extraction%2F@7440739a0cd15f53e8e193cb6ccf4f6a1d4c9ecfc01ddfd5d5bc93d0499e8a62