Shortcuts Automator

PassAudited by ClawScan on May 10, 2026.

Overview

This instruction-only skill transparently lets OpenClaw run and manage macOS Shortcuts, which is useful but can perform powerful actions using your macOS permissions.

Install this only if you want OpenClaw to run and manage local macOS Shortcuts. Review shortcuts before running them, avoid shortcuts from unknown sources, and grant macOS permissions only when needed.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

A shortcut could modify files, send messages, control apps, or perform other actions available to the user account.

Why it was flagged

The skill instructs the agent to invoke the macOS Shortcuts CLI to run user workflows. This is the stated purpose, but shortcuts can perform broad local automation depending on their contents.

Skill content
shortcuts run "Morning Routine" ... Shortcuts run with user permissions
Recommendation

Run only explicitly requested shortcuts you trust, and inspect unfamiliar shortcuts with `shortcuts view` or the Shortcuts app before running them.

What this means

Granting these permissions can let automation interact with apps or files that would otherwise be protected by macOS.

Why it was flagged

The documentation tells users they may need to grant macOS permissions that expand what OpenClaw or a shortcut can control. This is disclosed and purpose-aligned, but important for users to notice.

Skill content
Automation Access ... Accessibility ... Full Disk Access: Some shortcuts may require this for file operations
Recommendation

Grant only the permissions needed for trusted shortcuts, and review or revoke them later in System Settings if they are no longer needed.

What this means

The skill may fail or behave unexpectedly outside macOS or where the Shortcuts CLI is unavailable.

Why it was flagged

The skill relies on the macOS `shortcuts` command, but the registry metadata does not declare the OS or binary requirement. This is not malicious, but it is an under-declared environment dependency.

Skill content
OS restriction: none ... Required binaries: none ... No install spec — this is an instruction-only skill
Recommendation

Use this skill only on macOS systems with Apple Shortcuts available, and treat it as documentation for the built-in `shortcuts` CLI.