skills/vinitu/macos-tv-skill/macos-tv/Gen Agent Trust Hub

macos-tv

Pass

Audited by Gen Agent Trust Hub on Mar 22, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill uses local AppleScript (osascript) to interact with the TV.app, which is the standard and intended method for macOS application automation. No unauthorized or high-risk command execution patterns were detected.\n- [SAFE]: No network activity, external downloads, or data exfiltration mechanisms were found. All metadata and library operations are performed on the local machine and returned to the agent context.\n- [SAFE]: Script arguments are processed using native AppleScript handlers (on run argv), which is a secure way to pass user input into automation scripts. While the skill processes user-defined search queries and file paths, these are legitimate functions of a media management tool and do not pose a significant indirect prompt injection risk.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 22, 2026, 04:27 PM
Security Audit — agent-trust-hub — macos-tv