📦 macOS Desktop Control Enhanced — 桌面自动化
v1.0.0macOS Desktop Control Enhanced 提供 macOS 系统级桌面自动化，支持截图、进程管理、剪贴板操作、系统信息获取与窗口控制，一键集成 AppleScript 与 shell 命令，开发者可直接调用 API 实现批量任务、测试脚本或智能体流程，无需额外驱动，安全沙盒运行。
0· 51·0 当前·0 累计
by 安全扫描
OpenClaw
可疑
medium confidenceNULL
评估建议
This skill appears to implement the advertised macOS automation features, but several red flags and practical issues mean you should be cautious before installing or enabling it:
- Metadata mismatch: the skill is clearly macOS‑only (it calls macOS utilities) but the registry lists no OS restriction and declares no required binaries. Ask the publisher to mark it macOS-only and declare dependencies.
- Sensitive capabilities: it can read/overwrite the clipboard, capture screenshots, kill processes...详细分析 ▾
ℹ 用途与能力
The code and SKILL.md consistently implement macOS-specific capabilities (screenshot, app/process control, clipboard, mouse/keyboard). However the registry metadata lists no OS restriction and declares no required binaries while the implementation depends on macOS commands (screencapture, osascript, pmset, sw_vers, pkill, kill, open). The missing macOS-only designation and absent declared binaries are inconsistent with the skill's purpose.
⚠ 指令范围
Runtime instructions and scripts perform sensitive system operations: reading and setting the clipboard, capturing screenshots, killing processes, launching/terminating apps, and synthesizing mouse/keyboard events. Those actions are within the stated purpose but are inherently high‑impact. The SKILL.md does not limit when or how these functions should be used, and the code contains implementation errors (see details) that could cause unexpected behavior.
✓ 安装机制
There is no install spec (instruction-only), so nothing will be downloaded or installed by the platform. The skill includes local Python scripts which the agent may execute; this is low installation risk but means the scripts will run on the host if invoked.
✓ 凭证需求
No environment variables, credentials, or config paths are requested. The absence of requested secrets is appropriate for the stated functionality.
ℹ 持久化与权限
The skill is not marked 'always' and defaults allow autonomous invocation. Autonomous invocation combined with the ability to control input, clipboard, screenshots, and processes increases the blast radius if the agent runs the skill without explicit user oversight. Consider limiting autonomous use for such capabilities.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/4/11
NULL
● 可疑
安装命令
点击复制官方npx clawhub@latest install macos-desktop-control-enhanced
镜像加速npx clawhub@latest install macos-desktop-control-enhanced --registry https://cn.longxiaskill.com