Imsg 1.0.0

• Verdict: Pass
• Confidence: Medium
• Analyzed: Feb 21, 2026, 9:17 AM
• Findings: 0
• Version: 1.0.0

Overview

The skill is internally consistent with its stated purpose (a macOS CLI wrapper for Messages) but requires sensitive macOS permissions and installs from a third‑party Homebrew tap — review the tap/formula and privacy implications before installing.

This skill appears to do what it claims: it runs the imsg CLI to access Messages. Before installing, verify the Homebrew tap and formula (steipete/tap/imsg) and the project homepage (imsg.to) to ensure the source is trustworthy. Understand that using this tool requires granting Full Disk Access to your terminal and Automation control of Messages.app — these permissions let the binary read/send your messages and attachments. If you are uncomfortable, consider reviewing the imsg formula/source code first or building from a trusted source. If you prefer to limit risk, avoid granting Automation/Full Disk Access or disable autonomous model invocation for the agent so the skill cannot run without your explicit prompt.