imessage-extraction
Warn
Audited by Socket on Oct 10, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The core capabilities are coherent for an iMessage extraction skill and there is no clear exfiltration path, but the skill requires broad access to highly sensitive local data and references an ambiguously sourced third-party CLI ('yap') without enough provenance detail. Main risk is install trust and privacy exposure, not confirmed malware.
Confidence: 90%Severity: 56%
Audit Metadata