← Back to Skills Marketplace
Mirroir
by
Jeanfrancois Arcand
· GitHub ↗
· v0.13.0
743
Downloads
0
Stars
1
Active Installs
2
Versions
Install in OpenClaw
/install mirroir
Description
Control a real iPhone through macOS iPhone Mirroring — screenshot, tap, swipe, type, launch apps, record video, OCR, and run multi-step scenarios. Works with...
Usage Guidance
Before installing: 1) Inspect the installer: do NOT run curl | bash without reviewing https://mirroir.dev/get-mirroir.sh — prefer Homebrew (brew tap jfarcand/tap && brew install iphone-mirroir-mcp) or npx if you trust the npm package. 2) Verify sources: check the jfarcand/tap Homebrew formula and the iphone-mirroir-mcp npm package or upstream repo to confirm maintainers and code. 3) Understand permissions: Karabiner/DriverKit, Screen Recording, and Accessibility give the tool the ability to capture screen and synthesize input (keystroke capture / injection risk); only grant them on a trusted machine and revoke if you stop using the tool. 4) Limit exposure: run on a dedicated/test mac if possible, review MCP/server command config, and consider whether you want the agent to call this skill autonomously. 5) If unsure, request the upstream source code or run installation in an isolated environment (VM) and audit installed components before use.
Capability Analysis
Type: OpenClaw Skill
Name: mirroir
Version: 0.13.0
The skill is classified as suspicious primarily due to its installation method, which involves a `curl | bash` command (`/bin/bash -c "$(curl -fsSL https://mirroir.dev/get-mirroir.sh)"` in SKILL.md). This command executes arbitrary code downloaded from an external domain (`mirroir.dev`), posing a significant supply chain risk and allowing for potential arbitrary code execution. Furthermore, the skill automatically installs and configures Karabiner-Elements, a powerful system utility requiring deep system access (DriverKit extension, Accessibility permissions), and explicitly requires Screen Recording and Accessibility permissions, granting it extensive control and visibility over the user's macOS system and iPhone interactions. While the stated purpose is legitimate iPhone control, the installation method and required permissions introduce severe security vulnerabilities.
Capability Assessment
Purpose & Capability
The skill claims to control an iPhone via macOS iPhone Mirroring and requires the iphone-mirroir-mcp binary and macOS — this is coherent. Karabiner-Elements and a helper daemon are reasonable for virtual keyboard/control functionality. OS restriction to darwin and listed tools match the purpose.
Instruction Scope
Runtime instructions do not request unrelated files or credentials, but they include a one-line install that executes a remote script: /bin/bash -c "$(curl -fsSL https://mirroir.dev/get-mirroir.sh)". The SKILL.md also instructs enabling DriverKit/Karabiner and granting Screen Recording and Accessibility — expected for this capability but high-privilege and worth explicit review.
Install Mechanism
Install options include Homebrew (jfarcand/tap) and an npm package (iphone-mirroir-mcp), which are reasonable. However the SKILL.md recommends a direct curl | bash installer from mirroir.dev (arbitrary remote script execution). Prefer vetted package installs or inspect the installer before running.
Credentials
No environment variables or external credentials are requested. Requests for system permissions (Accessibility, Screen Recording, DriverKit extension) are proportional to a tool that simulates input and captures the screen, but they carry privacy/security implications (e.g., potential to capture keystrokes and screen contents).
Persistence & Privilege
The skill installs a helper daemon / MCP server and Karabiner components which run with system-level capabilities. It does not set always: true and does not request other skills' configs, but installing driver-level components and a persistent MCP helper increases blast radius and should be consented to consciously.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install mirroir - After installation, invoke the skill by name or use
/mirroir - Provide required inputs per the skill's parameter spec and get structured output
Version History
v0.13.0
Align version with iphone-mirroir-mcp v0.13.0
v1.0.0
Initial release — control a real iPhone through macOS iPhone Mirroring via MCP
Metadata
Frequently Asked Questions
What is Mirroir?
Control a real iPhone through macOS iPhone Mirroring — screenshot, tap, swipe, type, launch apps, record video, OCR, and run multi-step scenarios. Works with... It is an AI Agent Skill for Claude Code / OpenClaw, with 743 downloads so far.
How do I install Mirroir?
Run "/install mirroir" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Mirroir free?
Yes, Mirroir is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Mirroir support?
Mirroir is cross-platform and runs anywhere OpenClaw / Claude Code is available (darwin).
Who created Mirroir?
It is built and maintained by Jeanfrancois Arcand (@jfarcand); the current version is v0.13.0.
More Skills