Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Imessage Sender

v1.0.0

Send images from Mac to phone via iMessage

0· 328·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for wzyyyyyyyy/imessage-sender.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Imessage Sender" (wzyyyyyyyy/imessage-sender) from ClawHub.
Skill page: https://clawhub.ai/wzyyyyyyyy/imessage-sender
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Canonical install target

openclaw skills install wzyyyyyyyy/imessage-sender

ClawHub CLI

Package manager switcher

npx clawhub@latest install imessage-sender
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
The name/description match the included script which uses AppleScript (osascript) to send images via the Messages app. Minor inconsistency: the skill metadata declares no required binaries and no OS restriction, but the implementation depends on macOS (osascript, ~/Pictures path, Messages app). Declaring macOS and osascript as a required runtime would be appropriate.
Instruction Scope
SKILL.md limits runtime behavior to configuring a default recipient, copying images to ~/Pictures/openclaw-send/, and invoking the included send.py. The script only reads/writes a local config (~/.openclaw/...-config.json) and the image copy location, then invokes osascript to send the image. No network calls or unexpected data exfiltration are present.
Install Mechanism
This is an instruction-only skill with a small included script and no install spec; nothing is downloaded or installed by the registry that would increase risk.
Credentials
The script does not request secrets or external credentials. It writes a small JSON config and stores copies of images in ~/Pictures/openclaw-send/. Those file writes are proportional to the stated function.
Persistence & Privilege
The skill is not always-enabled and doesn't modify other skills or system-wide agent settings. It only creates files under the user's home directory for config and image storage.
Assessment
This skill appears to do what it says: it copies images to ~/Pictures/openclaw-send/, stores a small config at ~/.openclaw/...-config.json, and uses macOS osascript to send images via the Messages app. Before installing: (1) confirm you are on macOS and that osascript/Messages are available; (2) review the script if you want to ensure the default recipient isn't set without consent (the agent could call config set); (3) be aware the skill will write images and a config file to your home directory; (4) macOS may prompt for automation/accessibility permissions when osascript controls Messages—confirm those prompts; and (5) if you want stricter safety, run the script manually or inspect and run it in a controlled environment before allowing autonomous agent invocation.

Like a lobster shell, security has layers — review code before you run it.

latestvk97cwd7rj7d643zvm04vax288582h30y
328downloads
0stars
1versions
Updated 22h ago
v1.0.0
MIT-0

Send Image via iMessage

Function

Send images from Mac to phone number via iMessage/Messages app.

Usage

Send Image

When user requests to send an image, automatically send via iMessage to the phone.

Manual Commands

# Send image to phone number
python3 ~/.openclaw/workspace/skills/imessage-sender/scripts/send.py send "phone_number" "/path/to/image.png"

First Time Setup

Set the recipient phone number:

python3 ~/.openclaw/workspace/skills/imessage-sender/scripts/send.py config set "your_phone_number"

Image Storage

All images will be automatically copied to:

~/Pictures/openclaw-send/

The script automatically copies images to this directory before sending to avoid path issues.

Comments

Loading comments...