← Back to Skills Marketplace
wzyyyyyyyy

Imessage Sender

by Wzyyyyyyyy · GitHub ↗ · v1.0.0
cross-platform ⚠ suspicious
354
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install imessage-sender
Description
Send images from Mac to phone via iMessage
README (SKILL.md)

Send Image via iMessage

Function

Send images from Mac to phone number via iMessage/Messages app.

Usage

Send Image

When user requests to send an image, automatically send via iMessage to the phone.

Manual Commands

# Send image to phone number
python3 ~/.openclaw/workspace/skills/imessage-sender/scripts/send.py send "phone_number" "/path/to/image.png"

First Time Setup

Set the recipient phone number:

python3 ~/.openclaw/workspace/skills/imessage-sender/scripts/send.py config set "your_phone_number"

Image Storage

All images will be automatically copied to:

~/Pictures/openclaw-send/

The script automatically copies images to this directory before sending to avoid path issues.

Usage Guidance
This skill appears to do what it says: it copies images to ~/Pictures/openclaw-send/, stores a small config at ~/.openclaw/...-config.json, and uses macOS osascript to send images via the Messages app. Before installing: (1) confirm you are on macOS and that osascript/Messages are available; (2) review the script if you want to ensure the default recipient isn't set without consent (the agent could call config set); (3) be aware the skill will write images and a config file to your home directory; (4) macOS may prompt for automation/accessibility permissions when osascript controls Messages—confirm those prompts; and (5) if you want stricter safety, run the script manually or inspect and run it in a controlled environment before allowing autonomous agent invocation.
Capability Analysis
Type: OpenClaw Skill Name: imessage-sender Version: 1.0.0 The skill provides functionality to send local images via iMessage using AppleScript, but it contains a code injection vulnerability in `scripts/send.py`. The script constructs AppleScript commands by directly embedding user-provided file paths and recipient strings into a command string passed to `osascript` without sanitization, which could allow arbitrary AppleScript execution. While the behavior aligns with the stated purpose, the lack of input validation for shell-equivalent commands poses a significant security risk.
Capability Assessment
Purpose & Capability
The name/description match the included script which uses AppleScript (osascript) to send images via the Messages app. Minor inconsistency: the skill metadata declares no required binaries and no OS restriction, but the implementation depends on macOS (osascript, ~/Pictures path, Messages app). Declaring macOS and osascript as a required runtime would be appropriate.
Instruction Scope
SKILL.md limits runtime behavior to configuring a default recipient, copying images to ~/Pictures/openclaw-send/, and invoking the included send.py. The script only reads/writes a local config (~/.openclaw/...-config.json) and the image copy location, then invokes osascript to send the image. No network calls or unexpected data exfiltration are present.
Install Mechanism
This is an instruction-only skill with a small included script and no install spec; nothing is downloaded or installed by the registry that would increase risk.
Credentials
The script does not request secrets or external credentials. It writes a small JSON config and stores copies of images in ~/Pictures/openclaw-send/. Those file writes are proportional to the stated function.
Persistence & Privilege
The skill is not always-enabled and doesn't modify other skills or system-wide agent settings. It only creates files under the user's home directory for config and image storage.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install imessage-sender
  3. After installation, invoke the skill by name or use /imessage-sender
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release of image-sending skill for Mac via iMessage. - Allows sending images from your Mac to a phone number using the Messages app. - Provides both automatic sending (on user request) and manual command-line usage. - Includes setup instructions for configuring recipient phone number. - Automatically copies images to ~/Pictures/openclaw-send/ before sending to ensure compatibility.
Metadata
Slug imessage-sender
Version 1.0.0
License
All-time Installs 0
Active Installs 0
Total Versions 1
Frequently Asked Questions

What is Imessage Sender?

Send images from Mac to phone via iMessage. It is an AI Agent Skill for Claude Code / OpenClaw, with 354 downloads so far.

How do I install Imessage Sender?

Run "/install imessage-sender" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Imessage Sender free?

Yes, Imessage Sender is completely free (open-source). You can download, install and use it at no cost.

Which platforms does Imessage Sender support?

Imessage Sender is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Imessage Sender?

It is built and maintained by Wzyyyyyyyy (@wzyyyyyyyy); the current version is v1.0.0.

💬 Comments