Security audit
Apple Media Officialpm 0.1.1
Security checks for vulnerabilities and agentic risk
Overview
This is a disclosed macOS helper for discovering and controlling local Apple media devices, with no evidence of hidden or unrelated behavior.
Install this only if you want your agent to scan your local network for AirPlay devices and control local speakers or Apple TV devices. Review pyatv, Airfoil, and the referenced Airfoil skill before use, and grant Accessibility or pairing permissions deliberately.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.