Security audit
Security checks across malware telemetry and agentic risk
This skill appears to do what it claims, but it can automatically send local images through Messages and has weak safety controls around confirmation, retained copies, and AppleScript input handling.
Install only if you are comfortable letting an agent send images through your Mac Messages account. Use explicit file paths and recipient numbers, avoid unusual characters in filenames or recipients until AppleScript escaping is fixed, and periodically clear ~/Pictures/openclaw-send if the images are sensitive.
end tell
'''
result = subprocess.run(
['osascript', '-e', script],
capture_output=True,
text=True### Send Image When user requests to send an image, automatically send via iMessage to the phone. ### Manual Commands
64/64 vendors flagged this skill as clean.
No suspicious patterns detected.