ios-device-automation
Warn
Audited by Socket on Apr 1, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill is largely coherent with its stated iOS automation purpose and uses official same-project npm distribution, but it combines runtime package execution, forwarding API keys to a configurable model endpoint, and autonomous live-device control. This looks like a legitimate but high-impact automation skill rather than confirmed malware.
Confidence: 88%Severity: 58%
Audit Metadata