icloud
What this skill does
The skill is a CLI tool for querying Apple iCloud data from the command line, specifically for accessing local macOS databases without requiring an API token or network calls. It is designed for data
github/mvanhorn - Excessive Agency - 1.9k stars
Threat analysis
Skill info
pkg:github/mvanhorn/printing-press-library@5a78746?skill=icloudAssessments (1)
Excessive Agency
Excessive Agency via local-llm-review
.printing-press-patches/contacts-upsert-cache-completeness.json
The patch description includes a line that says 'merge command nil-guards both GetByAny results' - this suggests that the code may be handling edge cases in a way that could potentially allow for unBadge
Add the Anomity scan badge for icloud to your README.
How Anomity governs this at runtime
Scan-time vetting tells you what a skill says it will do. Anomity's Endpoint Sensor sees what agents actually do: it discovers skills alongside every other AI artifact on the endpoint, and runtime governance can allow, deny, or log the tool calls a skill triggers. Policy violations route to your SIEM, Slack, email, or Jira, backed by a queryable 90-day audit trail.
Book a 30-minute demo to see your own skill inventory.
Methodology and disputes
Every skill is assessed by the Anomity Skill Intelligence engine against its public source; findings indicate risk patterns, not confirmed exploitation. Maintainer of icloud? Report an issue or request a rescan.
