Find My
ReviewAudited by ClawScan on May 12, 2026.
Overview
This skill transparently queries macOS Find My locations using a local CLI and Screen Recording, but it handles sensitive location data and depends on an external Homebrew-installed binary you must trust.
Before installing, make sure you trust the Homebrew findmy-cli package and are comfortable granting Screen Recording to the OpenClaw host. Treat returned Find My locations as private information and avoid invoking the skill in shared or untrusted agent sessions.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The agent can retrieve friend names, coarse locations, staleness, and distance from Find My when the tool is invoked.
The skill needs a broad macOS permission and uses the user's FindMy.app context to retrieve other people's location information. This is sensitive, but it is clearly disclosed and central to the skill's purpose.
"Query Find My friend locations by driving FindMy.app via screen capture and Vision OCR... Requires Screen Recording permission granted to the host process."
Install only on a trusted Mac, grant Screen Recording deliberately, and use the skill only when you are comfortable exposing Find My location results to the agent conversation.
Running the tool launches the local findmy CLI, which may raise FindMy.app and perform OCR to produce the requested location output.
The plugin executes a local external binary. This is expected for the skill, and the code uses execFile with argument arrays rather than a shell.
const { stdout } = await execFileAsync(cliPath, args, { encoding: 'utf8', timeout: 60_000, maxBuffer: 4 * 1024 * 1024 });Use the default trusted findmy installation path and do not set cliPath or FINDMY_CLI_PATH to an untrusted executable.
The safety of the full workflow depends on the installed Homebrew formula and binary, not just the small OpenClaw wrapper code.
The plugin depends on separately installed Homebrew binaries, findmy and findmy-helper. The dependency is disclosed, but the core screen-scraping behavior is supplied by that external installation.
brew install omarshahine/tap/findmy-cli
Install the CLI only from the intended tap/repository, keep it updated, and review the external project if you need stronger assurance.