macOS Automator Services

PassAudited by VirusTotal on May 11, 2026.

Overview

Type: OpenClaw Skill Name: macos-automator-services Version: 1.0.0 The skill bundle provides a collection of macOS Automator workflows for common file-processing tasks such as PDF-to-JPG conversion, image stitching, and RAR extraction. The documentation (SKILL.md) includes transparent shell commands for installing dependencies via Homebrew and deploying the workflows to the standard macOS services directory (~/Library/Services/). No evidence of malicious intent, data exfiltration, or suspicious obfuscation was found in the provided instructions or code snippets.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

You may be installing executable Automator workflows whose actual contents were not present in this review.

Why it was flagged

The install flow relies on external Homebrew packages and workflow bundles, while the supplied artifacts contain only SKILL.md and no workflow contents to inspect.

Skill content
brew install imagemagick
brew install unrar
...
cp -r assets/*.workflow ~/Library/Services/
Recommendation

Before copying any .workflow bundle into ~/Library/Services, verify that the workflow files come from the expected source and review them in Automator.

What this means

When you use a service, it can execute local commands as your user account to process the selected files.

Why it was flagged

The documented Automator workflows are expected to run shell scripts and AppleScript when invoked from macOS Services.

Skill content
Shell Script: zsh/bash 脚本处理逻辑 ... osascript: macOS AppleScript 桥接(显示对话框和通知)
Recommendation

Use only reviewed workflows, and run them first on test files or copies before applying them to important data.

What this means

Wrong file selections or unexpected archive contents could create, rename, or overwrite local files.

Why it was flagged

The services intentionally rename files and extract archives, which are local file-changing operations.

Skill content
顺序命名图像文件 | 按选择顺序批量重命名图像 ... 解压RAR | 一键解压 RAR 压缩文件
Recommendation

Confirm Finder selections carefully and keep backups when batch-renaming, converting, or extracting files.

NoteHigh Confidence
ASI08: Cascading Failures
What this means

A problematic workflow could be copied to other synced environments if you enable this option.

Why it was flagged

The optional sync guidance can propagate installed Services workflows across cloud-synced locations or devices.

Skill content
使用 iCloud Drive 或 Dropbox 同步:
ln -s ~/Library/Services/ ~/Library/Mobile\ Documents/com~apple~Automator/Documents/Services
Recommendation

Only sync Services after reviewing the workflows, and avoid syncing untrusted or experimental Automator bundles.