send-imessage

• Outcome: Pass
• Latest audit: May 28, 2026 at 10:09 AM UTC
• Version:
  1.0.0

Overview

This skill does what it says: it lets an agent send iMessages from a Mac, with real outbound-message risk but no hidden install, persistence, or unrelated behavior found.

Install only if you are comfortable letting an agent send Messages from your Mac. Before each send, require the agent to show the final phone number and exact message body, and avoid using untrusted or unsanitized text that could break AppleScript quoting.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Medium

• Confidence: 89% confidence
• Finding: The skill enables sending arbitrary message content to a phone number through Messages without requiring an explicit confirmation step or warning that content will be transmitted externally. In an agent setting, this creates a real risk of unintended outbound communication, privacy leakage, or misuse if the extracted recipient or message body is wrong or manipulated.

VirusTotal

66/66 vendors flagged this skill as clean.