Security audit

iCloud Contacts

Security checks for vulnerabilities and agentic risk

Overview

This skill does what it claims: it connects to iCloud Contacts to search and edit contacts, with disclosed privacy controls and no hidden unrelated behavior found.

Install only if you are comfortable giving an agent access to your iCloud Contacts. Prefer readOnly mode unless you need edits, use the group allowlist for shared or sensitive address books, and require explicit confirmation for deletes, group removals, and any contact changes you consider sensitive.

SkillSpector

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

Confidence: 86% confidence
Finding: The invocation guidance includes broad natural-language triggers like "find," "who is," and "Another task needs an email address or phone number for a named person," which can cause the skill to activate during ordinary conversation or as a substep of unrelated tasks. Because this skill exposes sensitive personal contact data and supports mutation/deletion, over-broad routing increases the chance of unintended access, disclosure, or modification without sufficiently explicit user intent.

Static analysis

No suspicious patterns detected.