Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

MacPilot : Control macOS using CLI

v0.7.0

Control macOS via CLI using MacPilot for automating UI actions, managing windows, handling file dialogs, capturing screenshots, and system tasks.

0· 341·2 current·2 all-time
byAdhik Joshi@adhikjoshi
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
medium confidence
Purpose & Capability
Name/description match the content: all SKILL.md files are explicit about using the macpilot CLI to automate macOS (UI, windows, dialogs, screenshots, OCR, shell). No unrelated environment variables, binaries, or installs are requested by the skill itself. The requirement that MacPilot be installed on the machine is appropriate for the stated functionality.
Instruction Scope
Instructions tell the agent to run macpilot CLI commands (click/type/ui inspect/dialog navigation/screenshot/ocr/shell). This is coherent, but those commands enable powerful actions: arbitrary UI control, screen captures (including OCR of screen content), and execution of shell commands via macpilot shell run. These behaviors are expected for an automation skill but can expose sensitive data (visible screen contents, files) or run arbitrary commands — consider that when granting use/permissions.
Install Mechanism
Instruction-only skill with no install spec and no bundled code. The README suggests installing MacPilot itself from its GitHub releases or building from source; that is outside this skill. The lack of downloads or archive extraction in the skill package is low-risk.
Credentials
The skill does not request environment variables or credentials. It does require the user to install MacPilot and to grant Accessibility and (for screenshots/ocr/recording) Screen Recording permissions to MacPilot.app. Those OS permissions are necessary for the functionality but provide broad access to UI and visible screen contents — which is proportional to the stated purpose but inherently sensitive.
Persistence & Privilege
Skill is not always-enabled and does not request permanent platform-level privileges. It's instruction-only and doesn't modify other skills or agent configs. Autonomous invocation is permitted by default (platform behavior) — not flagged alone but combine with the sensitivity noted above when making a trust decision.
Assessment
This skill appears internally consistent with its description, but it depends on the third-party MacPilot binary and macOS permissions that are powerful: Accessibility lets the tool control apps and UI, and Screen Recording/screenshot+OCR can capture any visible content (passwords, private documents, chats). Before installing: (1) confirm you trust the MacPilot upstream (review its GitHub release you install), (2) only grant Accessibility/Screen Recording to the MacPilot.app you installed, (3) be cautious about allowing autonomous agent actions that perform shell commands or take screenshots—limit autonomy or require explicit user approval for sensitive tasks, and (4) avoid using the skill on machines with highly sensitive data unless you trust the binary and agent behavior. If you want stronger assurance, inspect the MacPilot binary source or run the skill in a less-privileged/testing account.

Like a lobster shell, security has layers — review code before you run it.

latestvk975vp45pdbkcfngpth3eq6cb5828n0c
341downloads
0stars
1versions
Updated 7h ago
v0.7.0
MIT-0

MacPilot Skills

Agent skills for MacPilot — a CLI tool for macOS automation via Accessibility APIs.

These skills teach AI coding agents (Claude Code, Cursor, Codex, etc.) how to use MacPilot to automate macOS tasks: clicking buttons, typing text, managing windows, handling file dialogs, taking screenshots, and more.

Install

npx skills add adhikjoshi/macpilot-skills

This uses the skills CLI to install skills into your agent of choice.

Available Skills

SkillDescription
macpilot-automationCore macOS automation — mouse, keyboard, apps, menus, clipboard (with history & search), notifications, shell, system controls
macpilot-ui-inspectorInspect and interact with UI elements via accessibility APIs — find, click, read, and modify controls
macpilot-dialog-handlerHandle native file dialogs (Open, Save, Print) — navigate folders, select files, dismiss alerts, wait-for & click-primary
macpilot-screenshot-ocrCapture screenshots, OCR click (find & click text on screen), screen recording with pause/resume
macpilot-window-managerManage windows — list, move, resize, snap, fullscreen, Spaces, save/restore layouts

Prerequisites

  1. MacPilot installed — Build from source or download from releases
  2. Accessibility permission — Grant MacPilot.app access in System Settings > Privacy & Security > Accessibility
  3. Screen Recording permission (for screenshot/OCR skills) — Grant in System Settings > Privacy & Security > Screen Recording

Quick Start

# Install MacPilot skills into Claude Code
npx skills add adhikjoshi/macpilot-skills

# Now ask Claude Code to automate macOS:
# "Open Safari and navigate to example.com"
# "Take a screenshot of the Finder window"
# "Snap VS Code to the left half and Terminal to the right"
# "Save this file to my Desktop"

Manual Install

If you prefer not to use npx skills, copy any SKILL.md file to your agent's skills directory:

# Claude Code (project scope)
mkdir -p .claude/skills/macpilot-automation
cp skills/macpilot-automation/SKILL.md .claude/skills/macpilot-automation/

# Claude Code (global scope)
mkdir -p ~/.claude/skills/macpilot-automation
cp skills/macpilot-automation/SKILL.md ~/.claude/skills/macpilot-automation/

License

MIT

Comments

Loading comments...