Personal Finish Notifier
PassAudited by VirusTotal on May 11, 2026.
Overview
Type: OpenClaw Skill Name: personal-finish-notifier Version: 0.1.4 The skill automates the installation of a notification hook for Claude Code by modifying the user's `~/.claude/settings.json` and deploying a shell script to `~/.claude/hooks/`. It transmits task completion summaries (including assistant messages) to external targets via the `openclaw` CLI. While these actions are aligned with the stated purpose of providing task alerts, the automated modification of third-party application configurations and the use of persistent hooks to exfiltrate task data to external channels (e.g., WhatsApp) represent high-risk capabilities.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Running setup could disable or replace existing Claude Code completion hooks and make this notifier run for every matching completion event.
The installer broadly registers the hook for all matches and unconditionally replaces the existing Stop and TaskCompleted hook entries instead of preserving or merging them.
entry = [{"matcher": "*", "hooks": [{"type": "command", "command": f"bash {hook_path}", "timeout": 15}]}]
data["Stop"] = entry
data["TaskCompleted"] = entryBack up ~/.claude/settings.json before installing, review the generated hook entries, and prefer an installer that merges with existing hooks, asks before overwriting, and provides an uninstall path.
The notifier will keep running on future Claude Code completion events until the hook and settings entry are removed.
The setup copies an executable notifier into Claude's hooks directory, creating persistent behavior that is purpose-aligned but remains active after installation.
HOOK_PATH="${HOME}/.claude/hooks/mac-task-notify.sh"
cp "${SKILL_DIR}/scripts/notify.sh" "$HOOK_PATH"
chmod +x "$HOOK_PATH"Install only if you want persistent completion notifications, and document or keep an uninstall procedure for removing the hook and related settings.
A configured OpenClaw/WhatsApp account may send automatic 'Claude has finished.' messages after Claude events.
The notifier uses the user's OpenClaw messaging authority to send an outbound WhatsApp message to the configured target, which is expected for the stated purpose.
openclaw message send --channel "$channel" --target "$target" --message "${MESSAGE}" --jsonSet OPENCLAW_NOTIFY_TARGET carefully, use OPENCLAW_NOTIFY_SELF_TARGET if this should only notify you, and set MAC_NOTIFY_MODE=off to disable delivery.
Pre-install checks may not warn you about the needed CLI tools or the local Claude configuration files that will be changed.
The supplied scripts call python3/openclaw and read/write ~/.claude files, so the registry metadata under-declares prerequisites and configuration touchpoints.
Required binaries (all must exist): none ... Required config paths: none
Verify python3 and the intended openclaw CLI on PATH before running the scripts, and declare these prerequisites in the skill metadata.