Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

mac-app-launcher

v1.0.0

查询和打开 macOS 应用程序。通过关键词搜索已安装的 App,并使用 open 命令启动。 当用户要求查找、搜索、列出、打开某个 Mac 应用程序时使用。

0· 217·0 current·0 all-time
bywei.wu@dlutwuwei

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for dlutwuwei/mac-app-launcher.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "mac-app-launcher" (dlutwuwei/mac-app-launcher) from ClawHub.
Skill page: https://clawhub.ai/dlutwuwei/mac-app-launcher
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install mac-app-launcher

ClawHub CLI

Package manager switcher

npx clawhub@latest install mac-app-launcher
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
!
Purpose & Capability
The SKILL.md behavior (using mdfind, ls, grep, and open to find and launch .app bundles) matches the declared purpose. However the registry metadata did not declare any required binaries or an OS restriction even though this is macOS-specific and depends on mdfind/open. That mismatch is an incoherence that should be corrected.
Instruction Scope
The instructions are narrowly scoped to searching Spotlight indexes and listing /Applications paths, then launching apps with open. They do not instruct reading unrelated files or exfiltrating data; their commands operate only on typical application locations and names.
Install Mechanism
This is an instruction-only skill with no install spec and no code files, so nothing will be written to disk by an installer. That is the lowest-risk install mechanism.
Credentials
The skill requires no environment variables or credentials and does not request excessive access. It does read typical system/application directories, which is appropriate for its stated goal.
Persistence & Privilege
always:false (normal). The skill can be invoked autonomously by the agent (disable-model-invocation:false), which is expected, but note that autonomous invocation would allow the agent to launch local macOS applications without additional confirmation.
What to consider before installing
This skill appears to do what it claims (search Spotlight and run open to start apps), but take these precautions before installing: 1) Only install if you run macOS — the skill depends on macOS tools (mdfind, open) though it doesn't declare that. 2) Because the skill can launch local apps, consider whether you want an agent able to start software autonomously; disable autonomous invocation if you prefer manual confirmation. 3) The skill has no homepage and an unknown source; prefer skills with verifiable provenance. 4) Ask the author to add explicit metadata: required binaries (mdfind, open, grep/ls) and an OS restriction to macOS. If you accept those caveats, the skill is functionally coherent; if not, avoid installing it.

Like a lobster shell, security has layers — review code before you run it.

latestvk9705xb1ctrr0s9q2cqzfjh4a1832twm
217downloads
0stars
1versions
Updated 23h ago
v1.0.0
MIT-0

Mac App Launcher

查询应用

使用 mdfind 通过 Spotlight 索引搜索应用(最快最全):

mdfind "kMDItemKind == 'Application'" -name "<关键词>"

如果用户未提供关键词、想浏览所有应用,改用目录列举:

ls /Applications /Applications/Utilities ~/Applications /System/Applications 2>/dev/null

搜索策略

  1. 优先用 mdfind,支持模糊匹配中英文应用名
  2. 如果 mdfind 无结果,回退到 ls + grep -i 在常见目录搜索
  3. 将匹配结果以列表形式展示给用户,标注完整路径

打开应用

找到目标应用后,使用 Shell 工具执行:

open -a "应用名称"

或使用完整路径:

open "/Applications/XXX.app"

工作流

  1. 用户提出要查找或打开某个应用
  2. mdfind 搜索匹配的应用
  3. 如果有多个匹配结果,列出让用户选择
  4. 如果只有一个匹配结果,直接打开
  5. 使用 open 命令启动应用

注意事项

  • open -a 需要精确的应用名或路径,优先使用 mdfind 返回的完整 .app 路径
  • 系统应用在 /System/Applications,第三方在 /Applications
  • Homebrew cask 应用也在 /Applications,但部分命令行工具在 /opt/homebrew/bin

Comments

Loading comments...