Back to skill
Skillv1.0.0

VirusTotal security

imsgctl · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

ReviewMay 1, 2026, 8:46 AM
Hash
bc1833442dfc9a205cae40c4413ddc035f60aa1f383368dccfd39f984b745114
Source
palm
Verdict
suspicious
Code Insight
Type: OpenClaw Skill Name: imsgctl Version: 1.0.0 The skill provides an AI agent with the capability to access and read highly sensitive personal data from Apple Messages (iMessage/SMS) databases, specifically targeting '~/Library/Messages/chat.db' on macOS. While this functionality is aligned with the stated purpose of the 'imsgctl' tool (SKILL.md), the inherent privacy risks associated with programmatic access to private communications constitute a high-risk behavior. No explicit evidence of data exfiltration or intentional malice was found, but the skill facilitates deep access into user privacy that could be easily abused.
External report
View on VirusTotal