AirTag

• Analyzed: May 11, 2026, 5:00 AM
• Findings: 1
• Version: 1.0.0
• Hash: 735309f80ff56ea224eff482102805e469220b422f7b6b963fb0eb3d2768aa87
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is classified as suspicious primarily due to its 'Programmatic API Mode' which relies on a 'user-managed connector based on the unofficial `findmy` ecosystem' using 'private Apple protocols' (SKILL.md, access-connectors.md). While the skill explicitly disclaims responsibility for this third-party tooling, states it 'should not guide key extraction or credential handling,' and requires explicit user acceptance of 'trust and account-risk trade-offs,' the integration with an unofficial, private-protocol stack introduces a significant vulnerability surface. This capability, despite the disclaimers, facilitates interaction with a potentially insecure or compromised external component, making it a risky capability without clear malicious intent from the skill itself.