macOS Reminders

• Analyzed: May 12, 2026, 4:15 AM
• Findings: 1
• Version: 1.0.0
• Hash: ba9ed89c325c226ab7d66e2ea0a6bab750df57dcac2db4d1a7784ec61c5d699a
• Source: palm
• External report: View on VirusTotal

Findings (1)

The OpenClaw AgentSkills bundle for macOS Reminders is benign. The `SKILL.md` provides clear, non-malicious instructions to the AI agent, including explicit security advice like passing JSON via stdin to avoid process list leakage. The core script, `scripts/reminders.sh`, demonstrates excellent security practices, including comprehensive input validation and sanitization (type, range, format checks, newline removal), input size limits (10KB), and robust prevention of AppleScript injection by passing all user-controlled data as `argv` parameters to `osascript` rather than interpolating it directly into executable code. All actions are logged, and there is no evidence of data exfiltration, malicious execution, persistence, or obfuscation.