Security audit

Find My

Security checks for vulnerabilities and agentic risk

Overview

This skill is a disclosed local Find My automation tool, but it handles very sensitive location screenshots and broad UI clicks without enough containment.

Install only if you are comfortable giving the agent Screen Recording and Accessibility control over Find My and creating local screenshots of people, device, and item locations. Prefer setting FM_OUTPUT_DIR to a private directory, delete screenshots after use, avoid arbitrary coordinate clicks, and verify the selected Find My item before playing sounds or opening actions.

A.I.G

Vulnerability Patterns

Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally

Findings (3)

T09 · Insecure Skill Coding Practices

Warning

Location: scripts/fm-screenshot.sh:7
Finding: Sensitive location screenshots are written to predictable temporary paths
Content: View full analysis
/dev/null | jq -r '(.data.windows[0].window_id // .windows[0].window_id) // empty') if [ -z "$window_id" ]; then echo "Error: Find My window not found. Is the app open?" >&2 exit 1 fi # Capture using window ID peekaboo image --window-id "$window_id" --path "$OUTPUT_PATH" 2>&1 ``` ```bash # scripts/fm-list.sh:11-25 OUTPUT_DIR="${FM_OUTPUT_DIR:-/tmp}" # Set bridge socket path - expand $HOME if present in value PEEKABOO_BRIDGE_SOCKET="${PEEKABOO_BRIDGE_SOCKET:-\$HOME/Library/Application Support/OpenClaw/bridge.sock}" PEEKABOO_BRIDGE_SOCKET="${PEEKABOO_BRIDGE_SOCKET//\$HOME/$HOME}" export PEEKABOO_BRIDGE_SOCKET # Switch to the requested tab "$SCRIPT_DIR/fm-tab.sh" "$TAB" >/dev/null 2>&1 sleep 0.3 # Capture screenshot timestamp=$(date +%s) output_path="$OUTPUT_DIR/findmy-${TAB}-list-${timestamp}.png" "$SCRIPT_DIR/fm-screenshot.sh" "$output_path" >/dev/null ``` ```bash # scripts/fm-locate.sh:12-26 OUTPUT_DIR="${FM_OUTPUT_DIR:-/tmp}" # Set bridge socket path - expand $HOME if present in value PEEKABOO_BRIDGE_SOCKET="${PEEKABOO_BRIDGE_SOCKET:-\$HOME/Library/Application Support/OpenClaw/bridge.sock}" PEEKABOO_BRIDGE_SOCKET="${PEEKABOO_BRIDGE_SOCKET//\$HOME/$HOME}" export PEEKABOO_BRIDGE_S ...[truncated 2744 chars]
Remediation: View remediation

T09 · Insecure Skill Coding Practices

Warning

Location: scripts/fm-click.sh:7
Finding: Relative-coordinate click helper permits clicks outside the Find My window
Content: View full analysis
}" REL_Y="${2:?Usage: fm-click.sh }" # Validate inputs are positive integers (prevent arithmetic injection) if ! [[ "$REL_X" =~ ^[0-9]+$ ]] || ! [[ "$REL_Y" =~ ^[0-9]+$ ]]; then echo "Error: Coordinates must be positive integers" >&2 exit 1 fi # Set bridge socket path - expand $HOME if present in value PEEKABOO_BRIDGE_SOCKET="${PEEKABOO_BRIDGE_SOCKET:-\$HOME/Library/Application Support/OpenClaw/bridge.sock}" PEEKABOO_BRIDGE_SOCKET="${PEEKABOO_BRIDGE_SOCKET//\$HOME/$HOME}" export PEEKABOO_BRIDGE_SOCKET # Get window bounds bounds=$(peekaboo window list --app "Find My" --json 2>/dev/null | jq -r '(.data.windows[0].bounds // .windows[0].bounds) // empty') if [ -z "$bounds" ]; then echo "Error: Find My window not found. Is the app open?" >&2 exit 1 fi win_x=$(echo "$bounds" | jq -r '.x') win_y=$(echo "$bounds" | jq -r '.y') # Calculate absolute coordinates abs_x=$((win_x + REL_X)) abs_y=$((win_y + REL_Y)) # Ensure Find My is focused and click peekaboo app switch --to "Find My" >/dev/null 2>&1 sleep 0.1 peekaboo click --coords "${abs_x},${abs_y}" 2>&1 ``` ### Technical Analysis The helper claims to click at coordinates relative to the Find My window. It validates only that both values consist of digits. It retrieves the complete window bounds but uses only the window's `x` and `y` origin; it never verifies that the supplied coordinates are less than the window's width and height. Consequently, sufficiently large values produce absolute coordinates outside Find My. Because Peekaboo operates with Accessibility permission, the resulting click may affect another application, system dialog, menu, Dock item, or desktop control visible at that screen position. Focusing Find My before clickin ...[truncated 1555 chars]
Remediation: View remediation
= win_width || REL_Y < 0 || REL_Y >= win_height )); then echo "Error: Coordinates must be inside the Find My window" >&2 exit 1 fi ``` 2. Validate that all window-bound values are integers before arithmetic expansion. 3. Apply a narrower allowed region when the intended operation targets only the sidebar or tab bar. 4. Prefer window-scoped accessibility-element targeting instead of global screen-coordinate clicking. 5. Re-query the window bounds immediately before the click to reduce errors caused by movement or resizing. 6. Verify that the target window is still owned by Find My and remains frontmost before executing the action. ]]>

T09 · Insecure Skill Coding Practices

Note

Location: scripts/fm-play-sound.sh:28
Finding: Broad accessibility keyword matching can activate unintended controls
Content: View full analysis
/dev/null) play_btn=$(echo "$result" | jq -r ' [.data.ui_elements // .ui_elements // [] | .[] | select(.is_actionable == true) | select(.label != null or .description != null) | select((.label // .description // "") | test("play|sound"; "i"))] | first // empty') if [ -n "$play_btn" ] && [ "$play_btn" != "null" ]; then play_id=$(echo "$play_btn" | jq -r '.id') echo "Found Play Sound button, clicking..." >&2 peekaboo click --on "$play_id" --window-id "$window_id" 2>&1 ``` ```bash # scripts/fm-info.sh:22-35 result=$(peekaboo see --window-id "$window_id" --json 2>/dev/null) # Look for info button (various possible labels) info_btn=$(echo "$result" | jq -r ' [.data.ui_elements // .ui_elements // [] | .[] | select(.is_actionable == true) | select(.description != null) | select(.description | test("info|detail|more"; "i"))] | first // empty') if [ -n "$info_btn" ] && [ "$info_btn" != "null" ]; then info_id=$(echo "$info_btn" | jq -r '.id') echo "Found info button, clicking..." >&2 peekaboo click --on "$info_id" --window-id "$window_id" >/dev/null 2>&1 ``` ### Technical Analysis Both scripts select the first actionable accessibility element matching broad regular expressions: - `play|sound` - `info|detail|more` The matching logic does not require an exact accessible name, expected role, expected location, or unique result. In `fm-play-sound.sh`, an element containing either “play” or “sound” is accepted rather than requiring the specific “Play Sound” action. In `fm-info.sh`, generic terms such as “more” can match unrelated controls. The scripts also do not confirm that ...[truncated 1356 chars]
Remediation: View remediation
&2 exit 1 fi ``` 4. Verify the currently selected tab and item before performing the click. 5. Restrict candidate elements to the expected panel or approximate bounds when that metadata is available. 6. Require user confirmation before a consequential action such as playing a sound if the target identity cannot be reliably verified. 7. Treat accessibility-tree or localization changes as a safe failure rather than falling back to a broad first-match operation. ]]>

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (2)

Tp4

High

Category: MCP Tool Poisoning
Confidence: 95% confidence
Finding: The skill is presented as a benign Find My controller, but its documented behavior includes capturing and storing screenshots of the Find My window, which can expose highly sensitive location data for people, devices, and items. That mismatch matters because users may authorize it for simple device-location tasks without realizing it persistently creates local image artifacts containing third-party and family location information.
Content: No source excerpt is available for this finding.

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: The script automatically captures and stores a screenshot of the Find My interface, which can expose precise location and address information for people, devices, or AirTags in a world-readable or weakly protected temporary directory. Because this happens without any confirmation, warning, minimization, or retention control, it creates a privacy-sensitive artifact that could be accessed by other local processes, users, logs, or later exfiltration paths.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.