findmy
Pass
Audited by Gen Agent Trust Hub on Jun 21, 2026
Risk Level: SAFEDATA_EXFILTRATIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [DATA_EXFILTRATION]: The skill captures high-precision, real-time location data of devices and AirTags by taking screenshots of the macOS Find My application.
- Evidence: The script uses
screencapture -w -o /tmp/findmy.pngto save the state of the tracking application. - Risk: Sensitive location information is written to a shared temporary directory and processed by vision-based analysis tools.
- [EXTERNAL_DOWNLOADS]: Recommends the installation of
peekaboo, a third-party UI automation tool from an external Homebrew tap. - Evidence:
brew install steipete/tap/peekaboois suggested for reliable UI interaction. - [COMMAND_EXECUTION]: Uses AppleScript to programmatically control the macOS graphical user interface and access system events.
- Evidence: Numerous
osascriptcommands are used to activate applications and simulate button clicks (e.g.,click button "Devices" of toolbar 1). - [DATA_EXFILTRATION]: Provides logic for persistent and automated location tracking without continuous user interaction.
- Evidence: Includes a shell loop (
while true; do ... sleep 300; done) designed to capture and log device movements every five minutes.
Audit Metadata