Images Sender

Send images from Mac to phone via iMessage

Security Scan

The skill's code and instructions match its stated purpose (sending images via macOS Messages); it runs locally, writes a small config and copies images to a local Pictures folder, and does not request external credentials or network access.

Purpose & Capability

Name/description (send images via iMessage) aligns with the included Python script and SKILL.md. The script copies images to ~/Pictures/openclaw-send, saves a small JSON config, and uses osascript to drive the Messages app — all expected for this purpose. Minor inconsistency: SKILL.md paths reference the skill workspace path while the script stores its config at ~/.openclaw/workspace/imessage-sender-config.json (outside the skill folder), but this is not disproportionate to the stated function.

Instruction Scope

Instructions and script stay within scope: they copy a file, save a default recipient, and invoke osascript to send via Messages. They do not call external endpoints or read unrelated system data. Notes: the script always copies images to ~/Pictures/openclaw-send (documented), and the SKILL.md suggests a default-recipient workflow but the send command in the script requires an explicit recipient (the saved default is not used by send), which is an inconsistency. Also, recipient and paths are interpolated directly into AppleScript without sanitization — a potential injection/abuse vector if untrusted input is provided.

Install Mechanism

No install spec; this is instruction-only with a single included script. Nothing is downloaded or installed by the skill at runtime beyond writing a small config and copying files into the user's Pictures folder.

Credentials

The skill requests no environment variables, no external credentials, and no special config paths beyond writing its own config (~/.openclaw/workspace/imessage-sender-config.json) and copying to ~/Pictures/openclaw-send. These are proportionate to the task of sending images via the local Messages app.

Persistence & Privilege

The skill is not forced-always; it is user-invocable and does not modify other skills or system-wide settings. It creates a per-user config and a per-user image folder, which is expected for its function. Note: using osascript will likely prompt macOS automation/access permissions for controlling the Messages app.

Assessment

This skill appears to do what it says: it copies images to ~/Pictures/openclaw-send, saves a small JSON config at ~/.openclaw/workspace/imessage-sender-config.json, and uses osascript to send the image via the Messages app. Before installing or running: (1) inspect the script yourself (it is included) and verify you are comfortable with it writing to those paths; (2) be aware macOS will likely ask you to allow automation access to Messages; (3) test with a non-sensitive image and a number you control; (4) note a minor mismatch: saving a default recipient does not get used by the send command — the script expects an explicit recipient for send; (5) the script interpolates the recipient into AppleScript without sanitization, so avoid passing untrusted strings as the recipient. If you want tighter privacy, consider editing the script to store and use the default recipient and to validate/sanitize inputs.

Send Image via iMessage

Function

Send images from Mac to phone number via iMessage/Messages app.

Usage

Send Image

When user requests to send an image, automatically send via iMessage to the phone.

Manual Commands

# Send image to phone number
python3 ~/.openclaw/workspace/skills/images-sender/scripts/send.py send "phone_number" "/path/to/image.png"

First Time Setup

Set the recipient phone number:

python3 ~/.openclaw/workspace/skills/images-sender/scripts/send.py config set "your_phone_number"

Image Storage

All images will be automatically copied to:

~/Pictures/openclaw-send/

The script automatically copies images to this directory before sending to avoid path issues.