← Back to Skills Marketplace
steipete

Imsg

by Peter Steinberger · GitHub ↗ · v1.0.0
darwin ✓ Security Clean
16945
Downloads
24
Stars
1150
Active Installs
1
Versions
Install in OpenClaw
/install imsg
Description
iMessage/SMS CLI for listing chats, history, watch, and sending.
Usage Guidance
Install only if you are comfortable giving your terminal access to Messages data and permission to control Messages.app for sending. Review prompts carefully before granting macOS permissions, and confirm recipients and message text before any send command.
Capability Analysis
Type: OpenClaw Skill Name: imsg Version: 1.0.0 The skill bundle is classified as suspicious due to the high-risk permissions required for the `imsg` tool to function, specifically `Full Disk Access` and `Automation permission to control Messages.app`, as detailed in `SKILL.md`. While these permissions are plausibly necessary for the stated purpose of reading and sending iMessages/SMS, they grant broad access to sensitive user data and system control, making the skill inherently high-risk. There is no clear evidence of intentional malicious behavior or prompt injection against the agent within the provided files, but the capabilities enabled are significant.
Capability Assessment
Purpose & Capability
The skill explicitly says it reads and sends Messages.app iMessage/SMS and documents chat listing, history, watch, and send commands, so private message access and message-sending capability are purpose-aligned.
Instruction Scope
The artifact contains straightforward usage instructions and a safety note to confirm the recipient and message before sending; I found no hidden instructions, output manipulation, prompt injection, or unrelated agent behavior.
Install Mechanism
Installation is disclosed as a Homebrew formula, steipete/tap/imsg, requiring the imsg binary; the skill bundle itself contains only SKILL.md and no executable scripts.
Credentials
Full Disk Access for the terminal and Messages.app automation are broad and sensitive, but they are clearly disclosed and proportionate to reading local message history and sending via Messages.app on macOS.
Persistence & Privilege
No artifact evidence showed persistence, credential capture, background startup, privilege escalation, destructive actions, or data exfiltration; the watch command is presented as a user-run chat monitoring command.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install imsg
  3. After installation, invoke the skill by name or use /imsg
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Metadata
Slug imsg
Version 1.0.0
License
All-time Installs 1152
Active Installs 1150
Total Versions 1
Frequently Asked Questions

What is Imsg?

iMessage/SMS CLI for listing chats, history, watch, and sending. It is an AI Agent Skill for Claude Code / OpenClaw, with 16945 downloads so far.

How do I install Imsg?

Run "/install imsg" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Imsg free?

Yes, Imsg is completely free (open-source). You can download, install and use it at no cost.

Which platforms does Imsg support?

Imsg is cross-platform and runs anywhere OpenClaw / Claude Code is available (darwin).

Who created Imsg?

It is built and maintained by Peter Steinberger (@steipete); the current version is v1.0.0.

💬 Comments