← Back to Skills Marketplace
Hide My Email
by
Mijo Kaliger
· GitHub ↗
· v1.0.1
690
Downloads
0
Stars
0
Active Installs
2
Versions
Install in OpenClaw
/install hide-my-email
Description
Generate Apple Hide My Email addresses on macOS terminal and copy them to clipboard using the hme CLI tool.
README (SKILL.md)
Hide My Email CLI
Generate Apple iCloud+ "Hide My Email" addresses from the terminal. The generated address is automatically copied to your clipboard.
Usage
hme \x3Clabel> [note]
- label (required): A name for the address (e.g. the service you're signing up for)
- note (optional): A description or reminder for the address
Examples
# Create an address labeled "Twitter"
hme "Twitter"
# Create an address with a note
hme "Shopping" "For online orders"
Output
On success, prints the masked email and copies the full address to clipboard:
✓ abc****@icloud.com (copied to clipboard)
On failure, prints an error message to stderr and exits non-zero.
Requirements
- macOS with an iCloud+ subscription
- System Settings accessibility permissions granted to your terminal app
Usage Guidance
This skill is coherent with its purpose, but take these precautions before installing: 1) Prefer cloning the repository and inspecting the files (hme and hide_my_email.applescript) yourself rather than running 'curl ... | sh'. 2) Review the AppleScript (hide_my_email.applescript) and the hme script to understand exactly what UI actions and clipboard operations they perform. 3) Be aware that granting Accessibility permission to your terminal lets the script control System Settings and read/copy clipboard contents — only grant it to trusted code and revoke the permission if you stop using the tool. 4) Verify the repository source and checksums if you rely on this for sensitive workflows. If you want higher assurance, request the AppleScript and hme script contents for review (they were not included in the SKILL.md payload here).
Capability Analysis
Type: OpenClaw Skill
Name: hide-my-email
Version: 1.0.1
The skill is classified as suspicious due to the use of `curl -fsSL ... | sh` as an installation method in `SKILL.md` and `README.md`. While the `install.sh` script provided within this bundle appears benign and performs standard installation steps (cloning from GitHub, copying files, suggesting PATH modification), the `curl | sh` pattern is a significant supply chain vulnerability. It allows arbitrary code execution from a remote source, making the installation process susceptible to compromise if the GitHub repository or CDN were to be maliciously altered. Additionally, the `SKILL.md`'s 'git' install option directly appends to `~/.zshrc` without explicit user confirmation, which, while common for CLI tools, is a direct modification of a user's shell configuration.
Capability Assessment
Purpose & Capability
The name/description match the files and runtime instructions: the skill wraps the 'hme' CLI which uses AppleScript to drive System Settings and copy a generated Hide My Email address to the clipboard. No unrelated credentials, env vars, or unexpected binaries are requested.
Instruction Scope
SKILL.md only instructs installing/running the hme CLI and describes the expected behavior. It explicitly requires Accessibility (screen/UI) permissions for the terminal app so the AppleScript can drive System Settings; that is expected for this use but is a sensitive capability. One install command in SKILL.md appends an export line directly to ~/.zshrc (modifies a shell profile) — install.sh in the repo is less intrusive and suggests how to add PATH manually.
Install Mechanism
No install spec in registry, but SKILL.md provides two installer options: a git clone (reasonable) and a curl | sh one-liner pinned to GitHub raw. Both fetch code from GitHub (a well-known host), but piping remote shell code into sh is higher-risk; the included install.sh (present in the package) is straightforward and easy to inspect before running.
Credentials
No environment variables, credentials, or config paths are requested. The required capability (Accessibility permission) is proportionate to UI automation needed to create Hide My Email addresses.
Persistence & Privilege
The skill does not request always: true and does not modify other skills. However, it requires granting Accessibility control to the terminal app, which allows UI automation and clipboard access — a powerful permission the user must grant explicitly and should only be granted after inspecting the scripts.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install hide-my-email - After installation, invoke the skill by name or use
/hide-my-email - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.1
- Added a recommended git-based installation option with updated instructions.
- Curl-based install now pins to version 1.0.1 for better reliability.
- Updated documentation and metadata to reflect new installation methods.
v1.0.0
Initial release
Metadata
Frequently Asked Questions
What is Hide My Email?
Generate Apple Hide My Email addresses on macOS terminal and copy them to clipboard using the hme CLI tool. It is an AI Agent Skill for Claude Code / OpenClaw, with 690 downloads so far.
How do I install Hide My Email?
Run "/install hide-my-email" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Hide My Email free?
Yes, Hide My Email is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Hide My Email support?
Hide My Email is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Hide My Email?
It is built and maintained by Mijo Kaliger (@manikal); the current version is v1.0.1.
More Skills