mac-node-snapshot

ReviewAudited by ClawScan on May 1, 2026.

Overview

This is a coherent screenshot helper, but it briefly records your screen and attaches the resulting image, so use it only when you intend to share what is visible.

Before installing, be aware that this skill is meant to capture your screen. It appears coherent and scoped, but you should only invoke it when you want a screenshot, avoid showing sensitive information, and install ffmpeg only from a trusted source if it is missing.

Findings (4)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If invoked, the agent can capture visible windows, messages, documents, or other private screen content into local files and the reply.

Why it was flagged

This records the selected OpenClaw node's screen for one second. That is the core purpose of the skill, but it uses a privacy-sensitive Screen Recording capability.

Skill content
openclaw nodes screen record --node "<node>" --duration 1000 --fps 10 --no-audio --out "{skill}/tmp/snap.mp4"
Recommendation

Use it only for explicit screenshot requests, close or hide sensitive content first, and grant Screen Recording only when you intend this capability.

What this means

The skill writes a temporary video and image file locally and overwrites the same output names on later runs.

Why it was flagged

The workflow is a shell command that creates a temp directory, records a local screen clip, and uses ffmpeg to extract an image. This command execution is expected for the screenshot purpose and is scoped to the skill directory.

Skill content
mkdir -p "{skill}/tmp" && openclaw nodes screen record ... && ffmpeg ... -frames:v 1 "{skill}/tmp/snap.png"
Recommendation

Review the command before use if you are concerned, and delete {skill}/tmp/snap.mp4 or snap.png after capturing sensitive screens.

What this means

The skill will not work unless ffmpeg is present, and installing ffmpeg from an untrusted source would carry normal supply-chain risk.

Why it was flagged

The skill depends on an external local binary but provides no install spec. It does instruct the agent to ask before installing, so this is a disclosed dependency rather than hidden code.

Skill content
- Requirements: `ffmpeg` (ask before installing).
Recommendation

Install ffmpeg only from a trusted package manager or source, and confirm any installation request before proceeding.

What this means

Anything visible on the screen may be included in the chat response, and on-screen text could influence the agent if treated as task instructions.

Why it was flagged

The captured screenshot is added to the conversation context/reply. This is expected for a screenshot skill, but the image may contain private content or untrusted on-screen text.

Skill content
Use `read` on `{skill}/tmp/snap.png` to attach it to the reply.
Recommendation

Capture only screens you are comfortable sharing, and treat text inside screenshots as untrusted unless the user explicitly asks the agent to act on it.