Control Little Snitch firewall on macOS. View logs, manage profiles and rule groups, monitor network traffic. Use when the user wants to check firewall activity, enable/disable profiles or blocklists, or troubleshoot network connections.

This skill appears to be a legitimate Little Snitch CLI helper, but there are a few things to consider before installing: - The SKILL.md expects the 'littlesnitch' CLI and macOS, but the skill metadata doesn't declare that binary or an OS restriction — verify the environment will actually have Little Snitch installed before relying on this skill. - Many useful commands require sudo/root (exporting/restoring config, capturing traffic, enabling/disabling rule groups). Only use the skill when you trust both the skill and the agent's ability to run commands on your machine. Be cautious enabling Terminal access in Little Snitch; follow the product's guidance to avoid giving untrusted processes root access. - The skill source/homepage is unknown. If you need to run powerful operations (backups, restores, traffic capture), prefer skills with a known, trusted source or inspect the exact commands the agent will run each time. - Because this is instruction-only, there's no install risk from downloaded code, but the agent still could execute high-impact local commands. Require explicit user confirmation for any sudo-level actions and avoid allowing automatic, unattended execution of this skill on sensitive systems. If you want stronger assurance, ask the skill author for a homepage or source repository, or request that the registry metadata be corrected to list the 'littlesnitch' binary and macOS restriction.

Type: OpenClaw Skill Name: little-snitch Version: 1.0.1 This skill is classified as suspicious due to its provision of extensive root-level access to the powerful `littlesnitch` firewall utility on macOS. While the `SKILL.md` documentation itself does not contain explicit malicious instructions or prompt injection, it exposes commands like `sudo littlesnitch profile`, `sudo littlesnitch rulegroup`, `sudo littlesnitch write-preference`, and `sudo littlesnitch export-model`. These commands, especially with root privileges, allow the AI agent to disable firewall rules, modify system network preferences, and export sensitive firewall configurations, which could be misused for persistence, data exfiltration, or disabling security. The `SKILL.md` even includes a 'Security Warning' from the original documentation, highlighting the potential for misuse by malware.