skills/raphaelmansuy/edgecrab/findmy/Gen Agent Trust Hub

findmy

Pass

Audited by Gen Agent Trust Hub on Jun 21, 2026

Risk Level: SAFEDATA_EXFILTRATIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [DATA_EXFILTRATION]: The skill captures high-precision, real-time location data of devices and AirTags by taking screenshots of the macOS Find My application.
  • Evidence: The script uses screencapture -w -o /tmp/findmy.png to save the state of the tracking application.
  • Risk: Sensitive location information is written to a shared temporary directory and processed by vision-based analysis tools.
  • [EXTERNAL_DOWNLOADS]: Recommends the installation of peekaboo, a third-party UI automation tool from an external Homebrew tap.
  • Evidence: brew install steipete/tap/peekaboo is suggested for reliable UI interaction.
  • [COMMAND_EXECUTION]: Uses AppleScript to programmatically control the macOS graphical user interface and access system events.
  • Evidence: Numerous osascript commands are used to activate applications and simulate button clicks (e.g., click button "Devices" of toolbar 1).
  • [DATA_EXFILTRATION]: Provides logic for persistent and automated location tracking without continuous user interaction.
  • Evidence: Includes a shell loop (while true; do ... sleep 300; done) designed to capture and log device movements every five minutes.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 21, 2026, 02:09 PM
Security Audit — agent-trust-hub — findmy