PeekabooV3 open claw的桌面自动化skill

ReviewAudited by ClawScan on May 14, 2026.

Overview

This is a coherent macOS GUI automation skill, but it installs and uses a third-party Peekaboo CLI with powerful Screen Recording and Accessibility permissions.

Install only if you want local Mac desktop automation through Peekaboo. Verify the Homebrew package source, grant Screen Recording and Accessibility permissions only if you are comfortable with the tool seeing and controlling your desktop, and require confirmation before destructive actions, sending messages, or handling secrets.

Publisher note

自动下载PeeKaboo进行自动化操作,定制请douyin @知易而行Ivan

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent may be able to view and operate native apps on the user's Mac, including clicking, typing, and interacting with dialogs.

Why it was flagged

The skill intentionally exposes broad local GUI automation. This matches its purpose, and the instructions include some approval guardrails, but the capability can affect local apps and user data if used carelessly.

Skill content
Trigger when the user wants to inspect or control native macOS apps... click, type, scroll, drag, switch apps, handle popups, or automate a desktop workflow on Mac
Recommendation

Use it only for explicit desktop tasks, watch for confirmation before sensitive or destructive actions, and avoid using it to enter passwords or 2FA codes.

What this means

Granting these permissions can allow the automation backend to see screen contents and control other applications.

Why it was flagged

Screen Recording and Accessibility are powerful macOS permissions. They are expected for native GUI automation, and the skill tells the agent to pause until the user grants them.

Skill content
If Screen Recording or Accessibility is missing, tell the user exactly what is missing and pause until granted.
Recommendation

Grant these permissions only if you trust Peekaboo and need desktop automation; revoke them in macOS settings when no longer needed.

What this means

Installing the skill may add third-party software to the Mac, and future installs may resolve to whatever version the Homebrew tap provides.

Why it was flagged

The skill installs an external Homebrew tap package, and the version is not pinned in the artifacts. This is disclosed and central to the skill, but it means behavior depends on an external package not included in the review.

Skill content
If `peekaboo` is missing, install it proactively:

```bash
brew install steipete/tap/peekaboo
```
Recommendation

Review the Homebrew tap/package before allowing installation, and consider asking the agent to confirm before installing even though the skill says it may proceed proactively.